diff --git a/genkey.xml b/genkey.xml
index 4af4e31..1842944 100644
--- a/genkey.xml
+++ b/genkey.xml
@@ -92,7 +92,9 @@
Used with --genreq to indicate a renewal,
- the existing keypair will be used.
+ the existing keypair will be used. Certs and keys must reside
+ in the nss database. Pem file cert renewal is not currently
+ supported.
@@ -128,6 +130,37 @@
+
+ The following example will create a self-signed certificate
+ and private key for the hostname www.nssexample.com
+ which will be stored in cert and key in the nss database:
+
+
+ # genkey --days --nss 120 www.nssexample.com
+
+
+
+
+ The following example will generate a certificate signing
+ request for a new mod_nss style cert specified by its nickname,
+ Server-Cert:
+
+
+ # genkey --genreq --nss --days 120 Server-Cert
+
+
+
+
+ The following example will generate a certificate signing request
+ for the renewal of an existing mod_nss cert specified by its nickname,
+ Server-Cert:
+
+
+ # genkey --genreq --renew --nss --days 120 Server-Cert
+
+
+
+