diff --git a/metropolis/node/core/identity/certificates.go b/metropolis/node/core/identity/certificates.go
index 7735ae6..86cfd13 100644
--- a/metropolis/node/core/identity/certificates.go
+++ b/metropolis/node/core/identity/certificates.go
@@ -101,7 +101,7 @@
 
 	// Ensure subject cert is signed by ca.
 	if err := cert.CheckSignatureFrom(ca); err != nil {
-		return nil, fmt.Errorf("signature veritifcation failed: %w", err)
+		return nil, fmt.Errorf("signature verification failed: %w", err)
 	}
 
 	// Ensure subject certificate is _not_ CA. CAs (cluster or possibly