Updated wording for testing self-signed certs

README.md

@@ -81,7 +81,10 @@ Test the Ingress configuration
 
     curl -v --cacert /tmp/tls.crt --resolve dpg.com:443:$EXTERNAL_IP https://dpg.com 
 
-In the above curl command we indicate that we trust the self-signed certificate. `/tmp/tls.crt` contains the public key needed to verify the certificate was signed by us.
+In the above curl command we indicate that we trust the self-signed certificate as an internal "CA". 
+
+`/tmp/tls.crt` contains the public key needed to verify the certificate for `dpg.com` was signed by the private key `/tmp/tls.key`.
+
 
 Alternatively on your own machine (not your workstation) modify hosts file and view in browser. (Note: this will require sudo access)