diff --git a/platformio.ini b/platformio.ini
index ebd3179dd..b0b233d23 100644
--- a/platformio.ini
+++ b/platformio.ini
@@ -132,6 +132,8 @@ build_flags                 = ${esp_defaults.build_flags}
                               -DPSTR_ALIGN=1
                               ; restrict to minimal mime-types
                               -DMIMETYPE_MINIMAL
+                              ; uncomment the following to enable TLS with 4096 RSA certificates
+                              ;-DUSE_4K_RSA
 
 [irremoteesp_full]
 build_flags                 = -DUSE_IR_REMOTE_FULL
diff --git a/tasmota/my_user_config.h b/tasmota/my_user_config.h
index b35075f8a..5156edd63 100644
--- a/tasmota/my_user_config.h
+++ b/tasmota/my_user_config.h
@@ -398,7 +398,7 @@
 //  #define USE_MQTT_AWS_IOT                       // [Deprecated] Enable MQTT for AWS IoT - requires a private key (+11.9k code, +0.4k mem)
                                                  //   Note: you need to generate a private key + certificate per device and update 'tasmota/tasmota_aws_iot.cpp'
                                                  //   Full documentation here: https://github.com/arendst/Tasmota/wiki/AWS-IoT
-//  #define USE_4K_RSA                             // Support 4096 bits certificates, instead of 2048
+//  for USE_4K_RSA (support for 4096 bits certificates, instead of 2048), you need to uncommend `-DUSE_4K_RSA` in `build_flags` from `platform.ini` or `platform_override.ini`
 
 // -- Telegram Protocol ---------------------------
 //#define USE_TELEGRAM                             // Support for Telegram protocol (+49k code, +7.0k mem and +4.8k additional during connection handshake)