diff --git a/apps/ca.c b/apps/ca.c
index 80595753629efa8a616eb3a48bc59c17ea2470d5..331c1364dcc64984a6672c1338f0b4f7c7137619 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -194,7 +194,8 @@ OPTIONS ca_options[] = {
     {"spkac", OPT_SPKAC, '<',
      "File contains DN and signed public key and challenge"},
     {"revoke", OPT_REVOKE, '<', "Revoke a cert (given in file)"},
-    {"valid", OPT_VALID, 's'},
+    {"valid", OPT_VALID, 's',
+     "Add a Valid(not-revoked) DB entry about a cert (given in file)"},
     {"extensions", OPT_EXTENSIONS, 's',
      "Extension section (override value in config file)"},
     {"extfile", OPT_EXTFILE, '<',
diff --git a/doc/apps/ca.pod b/doc/apps/ca.pod
index 9bf123919092b566229d5a7dfef81d6452422e95..3be69795886fd4478ba50609e4929b4220b6de30 100644
--- a/doc/apps/ca.pod
+++ b/doc/apps/ca.pod
@@ -13,6 +13,7 @@ B<openssl> B<ca>
 [B<-name section>]
 [B<-gencrl>]
 [B<-revoke file>]
+[B<-valid file>]
 [B<-status serial>]
 [B<-updatedb>]
 [B<-crl_reason reason>]
@@ -287,6 +288,10 @@ the number of hours before the next CRL is due.
 
 a filename containing a certificate to revoke.
 
+=item B<-valid filename>
+
+a filename containing a certificate to add a Valid certificate entry.
+
 =item B<-status serial>
 
 displays the revocation status of the certificate with the specified