diff --git a/sigstore-java/src/main/java/dev/sigstore/fulcio/client/FulcioCertificateVerifier.java b/sigstore-java/src/main/java/dev/sigstore/fulcio/client/FulcioCertificateVerifier.java
index 5bd3a59e..ba911fd8 100644
--- a/sigstore-java/src/main/java/dev/sigstore/fulcio/client/FulcioCertificateVerifier.java
+++ b/sigstore-java/src/main/java/dev/sigstore/fulcio/client/FulcioCertificateVerifier.java
@@ -89,7 +89,7 @@ private String extractSan(X509Certificate cert) throws FulcioVerificationExcepti
       }
       if (sans.size() > 1) {
         throw new FulcioVerificationException(
-            "Fulcio ceritifcate must only have 1 SAN, but found " + sans.size());
+            "Fulcio certificate must only have 1 SAN, but found " + sans.size());
       }
       var san = sans.stream().findFirst().get();
       var type = (Integer) san.get(0);