diff --git a/docs/jre-open_jdk_jre.md b/docs/jre-open_jdk_jre.md
index 2865816639..812da9cec6 100644
--- a/docs/jre-open_jdk_jre.md
+++ b/docs/jre-open_jdk_jre.md
@@ -100,6 +100,9 @@ The total available memory is first allocated to each memory type in proportion
 
 Termination is guaranteed since there is a finite number of memory types and in each iteration either none of the remaining memory sizes is constrained by the corresponding range and allocation terminates or at least one memory size is constrained by the corresponding range and is omitted from the next iteration.
 
+#### Custom CA Certificates
+Use the [`copy_resources()`][] functionality included in the buildpack.  The `resources` directory can contain a directory that will be overlaid on top of the component's sandbox directory. Put a custom `cacerts` file into `resources/open_jdk/lib/security` and it will be copied into `<open-jdk-sandbox>/lib/securtity/cacerts`.  This strategy has been used to add [JCE Unlimited Strength][].
+
 [`config/open_jdk_jre.yml`]: ../config/open_jdk_jre.yml
 [Configuration and Extension]: ../README.md#configuration-and-extension
 [centos6]: http://download.pivotal.io.s3.amazonaws.com/openjdk/centos6/x86_64/index.yml
@@ -110,3 +113,5 @@ Termination is guaranteed since there is a finite number of memory types and in
 [precise]: http://download.pivotal.io.s3.amazonaws.com/openjdk/precise/x86_64/index.yml
 [repositories]: extending-repositories.md
 [version syntax]: extending-repositories.md#version-syntax-and-ordering
+[`copy_resources()`]: https://github.com/cloudfoundry/java-buildpack/blob/master/docs/extending-droplet.md#copy_resources
+[JCE Unlimited Strength]: https://github.com/cloudfoundry/java-buildpack/issues/20