diff --git a/doc/settings/nginx.md b/doc/settings/nginx.md
index 7d0fdd3b5152a358081072dc5337e3f652b7121f_ZG9jL3NldHRpbmdzL25naW54Lm1k..7ba4b0ea19a7c4a994cb9a4931b8700a274b0b3a_ZG9jL3NldHRpbmdzL25naW54Lm1k 100644
--- a/doc/settings/nginx.md
+++ b/doc/settings/nginx.md
@@ -531,7 +531,8 @@
 
 ```ruby
   nginx['ssl_verify_client'] = "on"
+  nginx['ssl_client_certificate'] = "/etc/pki/tls/certs/root-certs.pem"
 ```
 
 and running reconfigure.
 
@@ -534,7 +535,8 @@
 ```
 
 and running reconfigure.
 
-These additional options NGINX supports for configuring SSL client authentication can also be configured:
+Optionally, you can configure how deeply in the certificate chain NGINX should verify
+before deciding that the clients don't have a valid certificate (default is `1`):
 
 ```ruby
@@ -539,6 +541,5 @@
 
 ```ruby
-  nginx['ssl_client_certificate'] = "/etc/pki/tls/certs/root-certs.pem"
   nginx['ssl_verify_depth'] = "2"
 ```