diff --git a/README.md b/README.md
index cc51817..70069c5 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,8 @@
 # gencert
 
+This script generates x509 server certificate (with all IPs in SAN) signed by a
+self-signed CA.
+
 ## Purpose
   - This script will always produce a self-signed x509 certificate in the
     current path with the IP addresses embedded to x509's SAN.
@@ -9,7 +12,7 @@
     used by the client in order to validate the server's certificate.
 
 ## Application
-  Backend requiring x509 running behind reverse proxy
+### Backend requiring x509 running behind reverse proxy
   - This script has been created in order to ease the Minio's SSE-C
     (Server Side Encryption - Customer provided keys) enablement when
     Minio server is running as a backend behind a reverse proxy like Traefik.