diff --git a/doc/eap_tls_plugin.diameap.conf.sample b/doc/eap_tls_plugin.diameap.conf.sample
new file mode 100644
index 0000000..81698be
--- /dev/null
+++ b/doc/eap_tls_plugin.diameap.conf.sample
@@ -0,0 +1,13 @@
+#### a sample configuration file for EAP-TLS
+
+#Certificate and Private key files
+#Cred = "<Path to certificate>" : "<Path to private Key>";
+
+#CA file
+#CA = "<Path to CA file>";
+
+#CRL file
+#CRL = "<Path to CRL file>";
+
+#Enable/disable checking certificate's CN
+check_cert_cn_username = 1;