diff --git a/README.md b/README.md
index 267633d..9202ff3 100644
--- a/README.md
+++ b/README.md
@@ -139,7 +139,7 @@ $ card-cli piv-ecsign -s 82 --hash-hex 8f25018489d6fe0dec34a352314c38dc146247b7d
 }
 ```
 
-# import private key to PIV card
+# import private key to PIV card & generate certificate
 
 ```shell
 $ ykman piv keys import --pin-policy NEVER --touch-policy CACHED 82 private_key.pem
@@ -150,6 +150,10 @@ $ ykman piv keys import --pin-policy NEVER --touch-policy CACHED 82 private_key.
 | --pin-policy | \[DEFAULT \| NEVER \| ONCE \| ALWAYS \] PIN policy for slot  |
 | --touch-policy | \[DEFAULT \|NEVER \|ALWAYS \|CACHED \] touch policy for slot |
 
+```shell
+$ ykman piv certificates generate 82 public_key.pem -s 'O=age-plugin-yubikey,OU=0.3.3,CN=hatter-yk'
+```
+
 <br>
 
 TODOs: