diff --git a/src/help.zon b/src/help.zon
index 70809b9b7..24015fd04 100644
--- a/src/help.zon
+++ b/src/help.zon
@@ -305,12 +305,23 @@
     \\          Block HTTP requests to private/internal IP addresses after DNS
     \\          resolution.
     \\          Defaults to false.
+    \\  --ca-cert <PATH>
+    \\          Load TLS root certificates from a PEM file, in addition to the
+    \\          system trust store. Can be passed multiple times.
+    \\  --ca-path <PATH>
+    \\          Load TLS root certificates from a directory of hashed certificates,
+    \\          as prepared by c_rehash / openssl rehash. Can be passed multiple
+    \\          times.
     \\  --cookie <PATH>
     \\          Path to a JSON file to load cookies from (read-only).
     \\          Defaults to no cookie loading.
     \\  --cookie-jar <PATH>
     \\          Path to a JSON file to save cookies to on exit (write-only).
     \\          Defaults to no cookie saving.
+    \\  --disable-root-certificates
+    \\          Skip loading the system trust store; only certificates given via
+    \\          --ca-cert and --ca-path are trusted.
+    \\          Defaults to false.
     \\  --disable-subframes
     \\          Skip loading <iframe> elements. The parser still registers them in the
     \\          DOM, but no child frame or Page.frameAttached events are produced.