diff --git a/testsite/tls/templates/web.example.com_https.cfg b/testsite/tls/templates/web.example.com_https.cfg
index 823765f8fb76b12e8a508b9536a760f8397e61ff..a422b6e124ec1f93e725c8a75c12c79599af6966 100644
--- a/testsite/tls/templates/web.example.com_https.cfg
+++ b/testsite/tls/templates/web.example.com_https.cfg
@@ -25,3 +25,8 @@ tls_www_server
 # Whether this certificate will be used to sign data (needed
 # in TLS DHE ciphersuites).
 signing_key
+
+# Whether this certificate will be used to encrypt data (needed
+# in TLS RSA ciphersuites). Note that it is preferred to use different
+# keys for encryption and signing.
+encryption_key