diff --git a/docs/manpages/virsh.rst b/docs/manpages/virsh.rst
index 6446a903caf49186695cfe6d51829ee32c0d6bd7..c637caa583a43bf72f1a5090d46e2d6a1ccb92a7 100644
--- a/docs/manpages/virsh.rst
+++ b/docs/manpages/virsh.rst
@@ -3182,7 +3182,7 @@ Providing *--tls* causes the migration to use the host configured TLS setup
 the migration of the domain. Usage requires proper TLS setup for both source
 and target. Normally the TLS certificate from the destination host must match
 +the host's name for TLS verification to succeed. When the certificate does not
-+match the destination hostname and the expected cetificate's hostname is
++match the destination hostname and the expected certificate's hostname is
 +known, *--tls-destination* can be used to pass the expected *hostname* when
 +starting the migration.
 
diff --git a/include/libvirt/libvirt-domain.h b/include/libvirt/libvirt-domain.h
index c1b9a9d1d0d4b450c75216989780e97f6db261a5..1d76cdcc3479162412e44c43bcf100d00b8dcc01 100644
--- a/include/libvirt/libvirt-domain.h
+++ b/include/libvirt/libvirt-domain.h
@@ -1059,7 +1059,7 @@ typedef enum {
  *
  * Normally the TLS certificate from the destination host must match the host's
  * name for TLS verification to succeed. When the certificate does not match
- * the destination hostname and the expected cetificate's hostname is known,
+ * the destination hostname and the expected certificate's hostname is known,
  * this parameter can be used to pass this expected hostname when starting
  * the migration.
  */