Add links, thanks @equalsJeffH!

index.bs

@@ -3949,12 +3949,12 @@ even if the SafetyNet API is also present.
         contained fields.
     - Verify that |response| is a valid SafetyNet response of version |ver|.
     - Verify that the nonce in the |response| is identical to the Base64url encoding of the SHA-256 hash of the concatenation of |authenticatorData| and |clientDataHash|.
-    - Let |attestationCert| be the attestation certificate.
+    - Let |attestationCert| be the [=attestation certificate=].
     - Verify that |attestatioCert| is issued to the hostname "attest.android.com" (see
         [SafetyNet online documentation](https://developer.android.com/training/safetynet/index.html#compat-check-response)).
     - Verify that the `ctsProfileMatch` attribute in the payload of |response| is [TRUE].
-    - If successful, return implementation-specific values representing attestation type [=Basic=] and [=attestation trust path=]
-        |attestationCert|.
+    - If successful, return implementation-specific values representing [=attestation type=] [=Basic=] and [=attestation trust
+        path=] |attestationCert|.
 
 
 ## FIDO U2F Attestation Statement Format ## {#fido-u2f-attestation}