diff --git a/apps/notifications/models.py b/apps/notifications/models.py
index 84d1f2a13..253dab95e 100644
--- a/apps/notifications/models.py
+++ b/apps/notifications/models.py
@@ -306,14 +306,15 @@ class MUserFeedNotification(mongo.Document):
 
         tokens = MUserNotificationTokens.get_tokens_for_user(self.user_id)
         # To update APNS:
+        # 0. Upgrade to latest openssl: brew install openssl
         # 1. Create certificate signing request in Keychain Access
         # 2. Upload to https://developer.apple.com/account/resources/certificates/list
         # 3. Download to secrets/certificates/ios/aps.cer
-        # 4. Open in Keychain Access:
+        # 4. Open in Keychain Access, Under "My Certificates":
         #    - export "Apple Push Service: com.newsblur.NewsBlur" as aps.p12 (or just use aps.cer in #5)
         #    - export private key as aps_key.p12 WITH A PASSPHRASE (removed later)
         # 5. openssl x509 -in aps.cer -inform DER -out aps.pem -outform PEM
-        # 6. openssl pkcs12 -nocerts -out aps_key.pem -in aps_key.p12
+        # 6. openssl pkcs12 -in aps_key.p12 -out aps_key.pem -nodes -legacy
         # 7. openssl rsa -out aps_key.noenc.pem -in aps_key.pem
         # 7. cat aps.pem aps_key.noenc.pem > aps.p12.pem
         # 8. Verify: openssl s_client -connect gateway.push.apple.com:2195 -cert aps.p12.pem