diff --git a/plugins/outputs/prometheus_client/README.md b/plugins/outputs/prometheus_client/README.md
index c2f097fbd..d1b4a1b0e 100644
--- a/plugins/outputs/prometheus_client/README.md
+++ b/plugins/outputs/prometheus_client/README.md
@@ -36,11 +36,9 @@ This plugin starts a [Prometheus](https://prometheus.io/) Client, it exposes all
   # tls_cert = "/etc/ssl/telegraf.crt"
   # tls_key = "/etc/ssl/telegraf.key"
   
-  ## If set, enable TLS client authentication with the given CA.
-  # tls_ca = "/etc/ssl/telegraf_ca.crt"
-
-  ## Boolean value indicating whether or not to skip SSL verification
-  # insecure_skip_verify = false
+  ## Set one or more allowed client CA certificate file names to
+  ## enable mutually authenticated TLS connections
+  # tls_allowed_cacerts = ["/etc/telegraf/clientca.pem"]
 
   ## Export metric collection time.
   # export_timestamp = false
diff --git a/plugins/outputs/prometheus_client/prometheus_client.go b/plugins/outputs/prometheus_client/prometheus_client.go
index c2af6f655..b37718ab7 100644
--- a/plugins/outputs/prometheus_client/prometheus_client.go
+++ b/plugins/outputs/prometheus_client/prometheus_client.go
@@ -107,11 +107,9 @@ var sampleConfig = `
   # tls_cert = "/etc/ssl/telegraf.crt"
   # tls_key = "/etc/ssl/telegraf.key"
   
-  ## If set, enable TLS client authentication with the given CA.
-  # tls_ca = "/etc/ssl/telegraf_ca.crt"
-
-  ## Boolean value indicating whether or not to skip SSL verification
-  # insecure_skip_verify = false
+  ## Set one or more allowed client CA certificate file names to
+  ## enable mutually authenticated TLS connections
+  # tls_allowed_cacerts = ["/etc/telegraf/clientca.pem"]
 
   ## Export metric collection time.
   # export_timestamp = false