punctuation fix

website/docs/core/certificates.md

@@ -9,6 +9,7 @@ Certificates in authentik are used for the following use cases:
 -   Connecting to remote docker hosts using the Docker integration
 -   Verifying LDAP Servers' certificates
 -   Encrypting outposts' endpoints
+-   Configure a webhook to use uploaded SSL certificates (CA)
 
 ## Default certificate
 
@@ -69,6 +70,24 @@ ak import_certificate --certificate /certs/mycert.pem --private-key /certs/somet
 
 This will import the certificate into authentik under the given name. This command is safe to run as a cron job; authentik will only re-import the certificate if it changes.
 
+## Configure a webhook to use uploaded SSL certificates
+
+When communicating with an external API, you will need to configure a generic webhook to utilize uploaded SSL certificates (CA).
+
+1. Create a custom image with a Docker file that looks something like this:
+
+```
+FROM ghcr.io/goauthentik/server
+
+USER root
+COPY /ak-root/venv/lib/python3.12/site-packages/certifi/cacert.pem /etc/ssl/certs
+RUN update-ca-certificates
+USER authentik
+```
+
+2. Add your custom SSL certificates (CA) to `/etc/ssl/certs`.
+3. Run `update-ca-certificates` as root to add the certificates to the environment.
+
 ## Web certificates
 
 Starting with authentik 2021.12.4, you can configure the certificate authentik uses for its core webserver. For most deployments this will not be relevant and reverse proxies are used, but this can be used to create a very compact and self-contained authentik install.