diff --git a/ChangeLog b/ChangeLog
index b663ddae9..e8237d69b 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -24,6 +24,9 @@
      bz#1502: authctxt.success is declared as an int, but passed by
      reference to function that accepts sig_atomic_t*. Convert it to
      the latter; ok markus@ dtucker@
+   - djm@cvs.openbsd.org 2010/05/01 02:50:50
+     [PROTOCOL.certkeys]
+     typo; jmeltzer@
 
 20100423
  - (dtucker) [configure.ac] Bug #1756: Check for the existence of a lib64 dir
diff --git a/PROTOCOL.certkeys b/PROTOCOL.certkeys
index a2069f547..0fa5748f3 100644
--- a/PROTOCOL.certkeys
+++ b/PROTOCOL.certkeys
@@ -103,7 +103,7 @@ p, q, g, y are the DSA parameters as described in FIPS-186-2.
 
 serial is an optional certificate serial number set by the CA to
 provide an abbreviated way to refer to certificates from that CA.
-If a CA does not with to number its certificates it must set this
+If a CA does not wish to number its certificates it must set this
 field to zero.
 
 type specifies whether this certificate is for identification of a user
@@ -205,4 +205,4 @@ source-address          string        Comma-separated list of source addresses
                                       certificates may be presented from any
                                       source address.
 
-$OpenBSD: PROTOCOL.certkeys,v 1.4 2010/04/16 01:47:25 djm Exp $
+$OpenBSD: PROTOCOL.certkeys,v 1.5 2010/05/01 02:50:50 djm Exp $