diff --git a/lib/hx509/TODO b/lib/hx509/TODO
index 8ab56ad06..02503e0d4 100644
--- a/lib/hx509/TODO
+++ b/lib/hx509/TODO
@@ -1,5 +1,7 @@
 $Id$
 
+handle private_key_ops better, esp wrt ->key_oid
+
 x501 name
 	parsing
 	comparing (ldap canonlisation rules)