document exact script to get ClientWhitelist fingerprint
diff --git a/app/src/main/java/org/fdroid/fdroid/privileged/ClientWhitelist.java b/app/src/main/java/org/fdroid/fdroid/privileged/ClientWhitelist.java
index c09f83f..ef2087a 100644
--- a/app/src/main/java/org/fdroid/fdroid/privileged/ClientWhitelist.java
+++ b/app/src/main/java/org/fdroid/fdroid/privileged/ClientWhitelist.java
@@ -24,9 +24,12 @@
 /**
  * Only apps signed using a certificate with a SHA-256 hash listed here
  * can access the Privileged Extension!
- * 1. Get SHA-256 of certificate with
- * keytool -list -printcert -jarfile com.example.apk
- * 2. Add here as lowercase without colons
+ * <ol>
+ * <li>Get SHA-256 of certificate as lowercase without colons with
+ * <code>keytool -list -printcert -jarfile com.example.apk | sed -n 's,SHA256:\s*\([A-F0-9:]*\),\1,p' | sed 's,:,,g'
+ * | tr A-f a-f</code></li>
+ * <li>Add here with Application ID</li>
+ * </ol>
  */
 public class ClientWhitelist {