diff --git a/README.md b/README.md
index 0e619f2e3..2094f08d6 100644
--- a/README.md
+++ b/README.md
@@ -106,7 +106,13 @@ config:unset <app> KEY1 [KEY2 ...] - unset one or more config vars
 
 ## TLS support
 
-Dokku provides easy TLS support from the box. To enable TLS connection to your application, copy the `.crt` and `.key` files into the `/home/dokku/:app/ssl` folder (notice, file names should be `server.crt` and `server.key`, respectively). Redeployment of the application will be needed to apply TLS configuration. Once it is redeployed, the application will be accessible by `https://` (redirection from `http://` is applied as well).
+Dokku provides easy TLS support from the box. This can be done app-by-app or for all subdomains at once.
+
+* To enable TLS connection to to one of your applications, copy the `.crt` and `.key` files into the applications `/home/dokku/:app/ssl` folder (notice, file names should be `server.crt` and `server.key`, respectively). 
+
+* To enable TLS connections for all your applications at once you will need a wildcard ssl certificate. To enable ssl across the server copy the `.crt` and `.key` files into the  `/home/dokku/ssl` folder (notice, file names should be `server.crt` and `server.key`, respectively).
+
+Redeployment of the application will be needed to apply TLS configuration. Once it is redeployed, the application will be accessible by `https://` (redirection from `http://` is applied as well).
 
 ## Upgrading