--- a/spec/img/WebID-overview.graffle/data.plist	Fri Aug 09 15:39:34 2013 +0200
+++ b/spec/img/WebID-overview.graffle/data.plist	Tue Sep 03 14:20:28 2013 +0200
@@ -7,7 +7,7 @@
 	<key>ApplicationVersion</key>
 	<array>
 		<string>com.omnigroup.OmniGrafflePro</string>
-		<string>139.16.0.171715</string>
+		<string>139.18.0.187838</string>
 	</array>
 	<key>AutoAdjust</key>
 	<true/>
@@ -1463,7 +1463,7 @@
 			</dict>
 		</array>
 		<key>Frame</key>
-		<string>{{384, 68}, {1345, 1110}}</string>
+		<string>{{384, 124}, {1345, 1054}}</string>
 		<key>ListView</key>
 		<true/>
 		<key>OutlineWidth</key>
@@ -1477,7 +1477,7 @@
 		<key>SidebarWidth</key>
 		<integer>120</integer>
 		<key>VisibleRegion</key>
-		<string>{{-46, 0}, {1210, 955}}</string>
+		<string>{{-46, 0}, {1210, 899}}</string>
 		<key>Zoom</key>
 		<real>1</real>
 		<key>ZoomValues</key>

--- a/spec/tls-respec.html	Fri Aug 09 15:39:34 2013 +0200
+++ b/spec/tls-respec.html	Tue Sep 03 14:20:28 2013 +0200
@@ -619,7 +619,9 @@
  <li>The Certificate Maker service can then create an X509 Certificate with the user's WebID filled in the Subject Alternative Name field and return this to the Client
  <li>the browser on receiving the response find the matching private key and places both in the Key Store
 </ul>
+<p>
 <img alt="Keygen Sequence Diagram" src="img/keygen-sequence.png" />
+</p>
 <p>The private key never leaves the secure Key Store. This exchange allows the Server to make the decision about what the Certificate should say, what the WebID should be, and to simultaneously add the public key to the User's <tref>WebID Profile</tref> page. The user experience for this Certificate creation is a one click operation. 
 </p>
 </section>