clarify client certificate docs

README.md

diff --git a/README.md b/README.md
index 98b11f9..29fa1a3 100644
--- a/README.md
+++ b/README.md
@@ -70,7 +70,7 @@
 | keytool artifact | C# client usage |
 | --- | --- |
 | `ca.crt` | Pass to `SetRootCertificatePath` / `RootCertificatePath` to trust the server certificate |
-| `client.keystore` | Contains the client private key and certificate chain; JDK 17 creates PKCS#12 by default, so pass it directly to `SetClientCertificatePath` |
+| `client.keystore` | Contains the client private key and client certificate; JDK 17 creates PKCS#12 by default, so pass it directly to `SetClientCertificatePath` |
 | `client.truststore` | Java client truststore; the C# client uses `ca.crt` instead |
 | `server.truststore` | Server-side truststore for trusting client certificates; not a C# client option |
 

README_ZH.md

diff --git a/README_ZH.md b/README_ZH.md
index cf39b6b..a39ad55 100644
--- a/README_ZH.md
+++ b/README_ZH.md
@@ -68,7 +68,7 @@
 | keytool 产物 | C# 客户端用法 |
 | --- | --- |
 | `ca.crt` | 传给 `SetRootCertificatePath` / `RootCertificatePath`，用于信任服务端证书 |
-| `client.keystore` | 包含客户端私钥和证书链；JDK 17 默认是 PKCS#12，直接传给 `SetClientCertificatePath` |
+| `client.keystore` | 包含客户端私钥和客户端证书；JDK 17 默认是 PKCS#12，直接传给 `SetClientCertificatePath` |
 | `client.truststore` | Java 客户端的 truststore；C# 侧用 `ca.crt`，不需要这个文件 |
 | `server.truststore` | 服务端用于信任客户端证书，不是 C# 客户端参数 |