diff --git a/builder/azure/common/client/config.go b/builder/azure/common/client/config.go
index d3449cc6cd9..617bb32151b 100644
--- a/builder/azure/common/client/config.go
+++ b/builder/azure/common/client/config.go
@@ -36,7 +36,8 @@ type Config struct {
 	ClientID string `mapstructure:"client_id"`
 	// A password/secret registered for the AAD SP.
 	ClientSecret string `mapstructure:"client_secret"`
-	// The path to a certificate that will be used to authenticate as the specified AAD SP.
+	// The path to a pem-encoded certificate that will be used to authenticate
+	// as the specified AAD SP.
 	ClientCertPath string `mapstructure:"client_cert_path"`
 	// A JWT bearer token for client auth (RFC 7523, Sec. 2.2) that will be used
 	// to authenticate the AAD SP. Provides more control over token the expiration
diff --git a/website/source/partials/builder/azure/common/client/_Config-not-required.html.md b/website/source/partials/builder/azure/common/client/_Config-not-required.html.md
index 1ba957dd5b7..a7c7a366b3c 100644
--- a/website/source/partials/builder/azure/common/client/_Config-not-required.html.md
+++ b/website/source/partials/builder/azure/common/client/_Config-not-required.html.md
@@ -9,7 +9,8 @@
     
 -   `client_secret` (string) - A password/secret registered for the AAD SP.
     
--   `client_cert_path` (string) - The path to a certificate that will be used to authenticate as the specified AAD SP.
+-   `client_cert_path` (string) - The path to a pem-encoded certificate that will be used to authenticate
+    as the specified AAD SP.
     
 -   `client_jwt` (string) - A JWT bearer token for client auth (RFC 7523, Sec. 2.2) that will be used
     to authenticate the AAD SP. Provides more control over token the expiration