diff --git a/engine/security/https.md b/engine/security/https.md
index 6216bb33a1..e15ca00781 100644
--- a/engine/security/https.md
+++ b/engine/security/https.md
@@ -102,7 +102,7 @@ config file:
 
     $ echo extendedKeyUsage = clientAuth > extfile.cnf
 
-Now sign the public key:
+Now sign the private key:
 
     $ openssl x509 -req -days 365 -sha256 -in client.csr -CA ca.pem -CAkey ca-key.pem \
       -CAcreateserial -out cert.pem -extfile extfile.cnf