diff --git a/genkey.xml b/genkey.xml
index d6d9147..50b3574 100644
--- a/genkey.xml
+++ b/genkey.xml
@@ -34,10 +34,7 @@
       <group>
         <arg><option>--genreq</option></arg>
         <arg><option>--makeca</option></arg>
-      </group>
-      <group>
         <arg><option>--nss</option></arg>
-        <arg><option>--debug</option>
       </group>
       <arg choice="req"><replaceable>hostname</replaceable></arg>
     </cmdsynopsis>
@@ -51,8 +48,12 @@
     Signing Requests (CSR).  Generated certificates are stored in the
     directory <filename>/etc/pki/tls/certs/</filename>, and the
     corresponding private key in
-    <filename>/etc/pki/tls/private/</filename>. If using mod_nss
-    they are stored in the nss key and certficate databases. </para>
+    <filename>/etc/pki/tls/private/</filename>. </para>
+
+    <para>When using mod_nss the private key is stored in the
+    nss database. Consult the nss.conf file in
+    <filename>/etc/httpd/conf.d/</filename>
+    for the location of the database. </para>
 
     <para><command>genkey</command> will prompt for the size of key
     desired; whether or not to generate a CSR; whether or not an
@@ -66,8 +67,6 @@
     <para><option>nss</option> indicates that mod_nss database 
     should be used to store keys and certificates.</para>
 
-    <para><option>debug</option> set this flag to enable debug logs.</para>
-
   </refsect1>
   
   <refsect1>