diff --git a/bind8/conf_dnssectools.cgi b/bind8/conf_dnssectools.cgi
index 25bb25142..76fcac162 100755
--- a/bind8/conf_dnssectools.cgi
+++ b/bind8/conf_dnssectools.cgi
@@ -60,12 +60,14 @@ print &ui_table_hr();
 #ksklife; dt_ksklife
 $ksklife = find_value("ksklife", $conf);
 print &ui_table_row($text{'dt_conf_ksklife'},
-		ui_textbox("dt_ksklife", $ksklife, 50));
+		ui_textbox("dt_ksklife", $ksklife, 50)." ".
+		$text{'dnssec_secs'});
 
 #zsklife; dt_zsklife
 $zsklife = find_value("zsklife", $conf);
 print &ui_table_row($text{'dt_conf_zsklife'},
-		ui_textbox("dt_zsklife", $zsklife, 50));
+		ui_textbox("dt_zsklife", $zsklife, 50)." ".
+		$text{'dnssec_secs'});
 
 print &ui_table_hr();
 
diff --git a/bind8/lang/en b/bind8/lang/en
index 7f10bfd48..e4328f58b 100644
--- a/bind8/lang/en
+++ b/bind8/lang/en
@@ -1098,6 +1098,7 @@ dnssec_header=Key re-signing options
 dnssec_enabled=Automatic key re-signing enabled?
 dnssec_period=Period between re-signs?
 dnssec_days=days
+dnssec_secs=seconds
 dnssec_desc=Zones signed with DNSSEC typically have two keys - a zone key which must be re-generated and signed regularly, and a key signing key which remains constant. This page allows you to configure Webmin to perform this re-signing automatically.
 dnssec_err=Failed to save DNSSEC key re-signing
 dnssec_eperiod=Missing or invalid number of days between re-signs