diff --git a/certs/taoCert.txt b/certs/taoCert.txt
index 8d2e08a12..64baf4514 100644
--- a/certs/taoCert.txt
+++ b/certs/taoCert.txt
@@ -89,6 +89,14 @@ to use PKCS#12 instead use -v1 witch a 12 algo like
 openssl pkcs8 -nocrypt -in server-keyPkcs8.pem -out server-key.pem
 
 
+*** DH paramters ***
+
+openssl dhparam 2048 > dh2048.param
+
+to add metadata
+
+openssl dhparam -in dh2048.param -text > dh2048.pem
+
 **** ECC ******
 
 1) make a key