diff --git a/src/rust/src/x509/certificate.rs b/src/rust/src/x509/certificate.rs
index 454f63ad5119..b9e331a72ddc 100644
--- a/src/rust/src/x509/certificate.rs
+++ b/src/rust/src/x509/certificate.rs
@@ -467,6 +467,8 @@ fn warn_if_invalid_params(
         | AlgorithmParameters::DsaWithSha256(Some(..))
         | AlgorithmParameters::DsaWithSha384(Some(..))
         | AlgorithmParameters::DsaWithSha512(Some(..)) => {
+            // This can also be triggered by an Intel On Die certificate
+            // https://github.com/pyca/cryptography/issues/11723
             let warning_cls = types::DEPRECATED_IN_41.get(py)?;
             pyo3::PyErr::warn_bound(
                 py,