diff --git a/ee/ucp/interlock/usage/tls.md b/ee/ucp/interlock/usage/tls.md
index 32f7e9910e..67fb8ac058 100644
--- a/ee/ucp/interlock/usage/tls.md
+++ b/ee/ucp/interlock/usage/tls.md
@@ -143,6 +143,8 @@ using a version of curl that includes the SNI header with insecure requests.
 If this doesn't happen, curl displays an error saying that the SSL handshake
 was aborterd.
 
+NOTE: Currently there is no way to update expired certificates using this method. The proper way is to 
+create a new secret then update the corresponding service. 
 
 ## Let your service handle TLS