diff --git a/envoy.yaml b/envoy.yaml
index addac42..bb5665f 100644
--- a/envoy.yaml
+++ b/envoy.yaml
@@ -24,10 +24,10 @@ static_resources:
               match_typed_subject_alt_names:
               - san_type: URI
                 matcher:
-                  prefix: spiffe://john-stream.com
+                  prefix: spiffe://john-stream.com # (2)!
             tls_certificates:
             - certificate_chain: { filename: /certs/cert.pem }
-              private_key: { filename: /certs/envoy.pem }
+              private_key: { filename: /certs/envoy.pem } # (3)!
       # --8<-- [end:transport_socket]
       filters:
       - name: envoy.filters.network.http_connection_manager