diff --git a/CMakeLists.txt b/CMakeLists.txt
index d9f8e01e1..e1db618b5 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -222,7 +222,7 @@ if(NOT PACKAGE_STATIC)
 		CMAKE_SYSTEM_PROCESSOR MATCHES "AMD64"
 	)
 		message("++ Adding flags for processor ${CMAKE_SYSTEM_PROCESSOR}")
-		add_compile_options(-maes -mrdrnd -mpclmul -msse -msse2 -mssse3 -msse4)
+		add_compile_options(-maes -mrdrnd -mpclmul -msse -msse2 -mssse3 -msse4 -msse4.1 -msse4.2)
 	endif()
 
 	set(GO_BUILD_TAGS)
diff --git a/cmd/zerotier/cli/help.go b/cmd/zerotier/cli/help.go
index b54b39eb5..25938b1ce 100644
--- a/cmd/zerotier/cli/help.go
+++ b/cmd/zerotier/cli/help.go
@@ -76,11 +76,14 @@ Commands:
     sign <identity> <file>               Sign a file with an identity's key
     verify <identity> <file> <sig>       Verify a signature
   cert <command> [args]                - Certificate commands
+    show [serial]                        List or show details of a certificate
     newsid [secret]                      Create a new subject unique ID
     newcsr <subject> <secret> [csr]      Create a subject CSR
     sign <csr> <identity> [certificate]  Sign a CSR to create a certificate
     verify <certificate>                 Verify a certificate
-    import <certificate> [<trust>]       Import certificate into this node
+    import <certificate> [trust,[trust]] Import certificate into this node
+      rootca                             Certificate is a root CA
+      rootset                            ZeroTier root node set
     restore                              Re-import default certificates
     export <serial> [path]               Export a certificate from this node
     delete <serial|ALL>                  Delete certificate from this node