diff --git a/testsite/tls/templates/ldap.example.com_ldap.cfg b/testsite/tls/templates/ldap.example.com_ldap.cfg
index af86c584fb19cc7dd96f2ea847f8202a9d752ecc..6dc4d541020235416c638ec920444d60c975d5b5 100644
--- a/testsite/tls/templates/ldap.example.com_ldap.cfg
+++ b/testsite/tls/templates/ldap.example.com_ldap.cfg
@@ -25,3 +25,8 @@ tls_www_server
 # Whether this certificate will be used to sign data (needed
 # in TLS DHE ciphersuites).
 signing_key
+
+# Whether this certificate will be used to encrypt data (needed
+# in TLS RSA ciphersuites). Note that it is preferred to use different
+# keys for encryption and signing.
+encryption_key