diff --git a/README.rst b/README.rst
index c2dd622..cf1bdd4 100644
--- a/README.rst
+++ b/README.rst
@@ -25,6 +25,33 @@ For a full-blown CA you might want to take a look at
 `OpenCA <https://pki.openca.org/>`_.
 
 
+Usecases
+--------
+
+Following usecases are covered:
+
+I am a sysadmin. I want to allow my Ubuntu roadwarriors to
+connect to network services at headquarters via OpenVPN.
+I want to make use of domain membership trust to automatically sign the certificates.
+Common name is set to computers hostname without the domain suffix.
+NetworkManager integration is necessary so the user can see the VPN connection state.
+Software installation and one simple configuration file should suffice to get up and running.
+
+I am a sysadmin. Employees with different operating systems need to access
+internal network services over IPSec.
+I want to provide web interface for submitting the certificate signing request online.
+I want to get notified via e-mail when a user submits a certificate.
+Once I have signed the certificate I want the user to have easy way to download
+the signed certificate from the same web interface.
+Common name is set to username.
+
+I am a sysadmin. Employees need to get access to intranet wiki using
+HTTPS certificates possibly with multiple devices.
+Common name is set to username@device-identifier.
+The user logs in using domain account in the web interface and can automatically
+retrieve a P12 bundle which can be installed on her Android device.
+
+
 Features
 --------