diff --git a/thalerj/README.md b/thalerj/README.md
index fb1dfb4..0f82eff 100644
--- a/thalerj/README.md
+++ b/thalerj/README.md
@@ -79,3 +79,49 @@
 
 This will print out the configured remote rsyslog server's IP address and port,
 in JSON format.
+
+## BMC Certificate management
+
+Certificate management allows replacing the existing certificate and private
+key file with another (possibly certification Authority (CA) signed)
+certificate and private key file. Certificate management allows the user to
+install server, client and root certificates.
+
+### Update HTTPS server certificate
+```
+openbmctool <connection options> certificate update server https -f <File>
+```
+File: The [PEM](https://en.wikipedia.org/wiki/Privacy-Enhanced_Mail) file
+      containing both certificate and private key.
+
+### Update LDAP client certificate
+```
+openbmctool <connection options> certificate update client ldap -f <File>
+```
+File: The PEM file containing both certificate and private key.
+
+### Update LDAP root certificate
+```
+openbmctool <connection options> certificate update authority ldap -f <File>
+```
+File: The PEM file containing only certificate.
+
+
+### Delete HTTPS server certificate
+```
+openbmctool <connection options> certificate delete server https
+```
+Deleting a certificate will create a new self-signed certificate and will
+install the same.
+
+### Delete LDAP client certificate
+```
+openbmctool <connection options> certificate delete client ldap
+```
+
+### Delete LDAP root certificate
+```
+openbmctool <connection options> certificate delete authority ldap
+```
+Deleting the root certificate can cause an LDAP service outage. Please refer to
+the LDAP documentation before using this command.