diff --git a/website/source/docs/job-specification/template.html.md b/website/source/docs/job-specification/template.html.md
index 2e3a92275..ca7b9adea 100644
--- a/website/source/docs/job-specification/template.html.md
+++ b/website/source/docs/job-specification/template.html.md
@@ -223,6 +223,24 @@ will be identical to the contents of the file.
 For more details see [go-envparser's
 README](https://github.com/schmichael/go-envparse#readme).
 
+## Vault Integration
+
+This example will grab a PKI certificate from Vault and put it out on local disk for your application in PEM format
+including the CA, public and private key in 1 file.
+
+```
+template {
+  data = <<EOH
+{{ with secret "pki/issue/foo" "common_name=foo.service.consul" "ip_sans=127.0.0.1" "format=pem" }}
+{{ .Data.certificate }}
+{{ .Data.issuing_ca }}
+{{ .Data.private_key }}{{ end }}
+EOH
+  destination   = "$${NOMAD_SECRETS_DIR}/bundle.pem"
+  change_mode   = "restart"
+}
+```
+
 ## Client Configuration
 
 The `template` block has the following [client configuration