diff --git a/doc/man/man5/lloadd.conf.5 b/doc/man/man5/lloadd.conf.5
index 6010cc32d1..c8bef9dbf0 100644
--- a/doc/man/man5/lloadd.conf.5
+++ b/doc/man/man5/lloadd.conf.5
@@ -979,7 +979,7 @@ The original ETCDIR/lloadd.conf is another example.
 .SH LIMITATIONS
 Support for proxying SASL Binds is limited to the
 .B EXTERNAL
-mechanism (and only to extract the DN of a client TLS cerificate if used during
+mechanism (and only to extract the DN of a client TLS certificate if used during
 the last renegotiation) and mechanisms that rely neither on connection metadata
 (as Kerberos does) nor establish a SASL integrity/confidentialiy layer (again,
 some Kerberos mechanisms,