diff --git a/demos/certs/mkcerts.sh b/demos/certs/mkcerts.sh
index f1407cb4029b3837263a974c2b4923b7c1b38fa5..18daa6bcfb8d2a4bf35bd8ea364c150ebfe74e0e 100644
--- a/demos/certs/mkcerts.sh
+++ b/demos/certs/mkcerts.sh
@@ -28,7 +28,7 @@ CN="Test Client Cert" $OPENSSL req -config ca.cnf -nodes \
 $OPENSSL x509 -req -in creq.pem -CA intca.pem -CAkey intkey.pem -days 3600 \
 	-extfile ca.cnf -extensions usr_cert -CAcreateserial -out client.pem
 
-# Revkoed certificate: request first
+# Revoked certificate: request first
 CN="Test Revoked Cert" $OPENSSL req -config ca.cnf -nodes \
 	-keyout revkey.pem -out rreq.pem -newkey rsa:1024
 # Sign using intermediate CA