No domains in cli.ini
diff --git a/examples/cli.ini b/examples/cli.ini
index 63af3cc498e..dbaa9c59957 100644
--- a/examples/cli.ini
+++ b/examples/cli.ini
@@ -1,6 +1,11 @@
 # This is an example of the kind of things you can do in a configuration file.
 # All flags used by the client can be configured here. Run Certbot with
 # "--help" to learn more about the available options.
+#
+# Note that these options apply automatically to all use of Certbot for
+# obtaining or renewing certificates, so options specific to a single
+# certificate on a system with several certificates should not be placed
+# here.
 
 # Use a 4096 bit RSA key instead of 2048
 rsa-key-size = 4096
@@ -8,13 +13,6 @@ rsa-key-size = 4096
 # Uncomment and update to register with the specified e-mail address
 # email = foo@example.com
 
-# Uncomment and update to generate certificates for the specified
-# domains.
-# domains = example.com, www.example.com
-
-# Uncomment to use a text interface instead of ncurses
-# text = True
-
 # Uncomment to use the standalone authenticator on port 443
 # authenticator = standalone
 # standalone-supported-challenges = tls-sni-01

This is a small set of changes to the example `cli.ini` to mitigate a recurring bug where people list their domains there with `domains =` and then are unable to renew at all (due to the renewer rejecting `-d`). This tries to make clear that this is for systemwide defaults that apply to every cert on the system.