1 files changed, 10 insertions, 10 deletions

diff --git a/src/lib/libcrypto/man/X509_STORE_CTX_get_error.3 b/src/lib/libcrypto/man/X509_STORE_CTX_get_error.3
index 85b7ac06f0..36f153af5a 100644
--- a/src/lib/libcrypto/man/X509_STORE_CTX_get_error.3
+++ b/src/lib/libcrypto/man/X509_STORE_CTX_get_error.3
@@ -1,6 +1,6 @@
-.\"     $OpenBSD: X509_STORE_CTX_get_error.3,v 1.2 2016/11/06 15:52:50 jmc Exp $
+.\"     $OpenBSD: X509_STORE_CTX_get_error.3,v 1.3 2016/12/03 13:36:03 jmc Exp $
 .\"
-.Dd $Mdocdate: November 6 2016 $
+.Dd $Mdocdate: December 3 2016 $
 .Dt X509_STORE_CTX_GET_ERROR 3
 .Os
 .Sh NAME
@@ -86,7 +86,7 @@ successful, the returned chain may be incomplete or invalid.
 The returned chain persists after the
 .Fa ctx
 structure is freed.
-When it is no longer needed, it should be free up using
+When it is no longer needed, it should be freed up using
 .Fn sk_X509_pop_free chain X509_free .
 .Pp
 .Fn X509_verify_cert_error_string
@@ -144,8 +144,8 @@ The CRL of a certificate could not be found.
  No unable to decrypt certificate's signature
 The certificate signature could not be decrypted.
 This means that the actual signature value could not be determined
-rather than it not matching the expected value, this is only meaningful
-for RSA keys.
+rather than it not matching the expected value.
+This is only meaningful for RSA keys.
 .It Dv X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE : \
  No unable to decrypt CRL's signature
 The CRL signature could not be decrypted: this means that the actual
@@ -219,7 +219,7 @@ The root CA is marked to reject the specified purpose.
 .It Dv X509_V_ERR_SUBJECT_ISSUER_MISMATCH : No subject issuer mismatch
 The current candidate issuer certificate was rejected because its
 subject name did not match the issuer name of the current certificate.
-This is only set if issuer check debugging is enabled it is used for
+This is only set if issuer check debugging is enabled; it is used for
 status notification and is
 .Sy not
 in itself an error.
@@ -228,7 +228,7 @@ in itself an error.
 The current candidate issuer certificate was rejected because its
 subject key identifier was present and did not match the authority key
 identifier current certificate.
-This is only set if issuer check debugging is enabled it is used for
+This is only set if issuer check debugging is enabled; it is used for
 status notification and is
 .Sy not
 in itself an error.
@@ -237,7 +237,7 @@ in itself an error.
 The current candidate issuer certificate was rejected because its issuer
 name and serial number was present and did not match the authority key
 identifier of the current certificate.
-This is only set if issuer check debugging is enabled it is used for
+This is only set if issuer check debugging is enabled; it is used for
 status notification and is
 .Sy not
 in itself an error.
@@ -259,7 +259,7 @@ A certificate policies extension had an invalid value (for example an
 incorrect encoding) or some value inconsistent with other extensions.
 This error only occurs if policy processing is enabled.
 .It Dv X509_V_ERR_NO_EXPLICIT_POLICY : No no explicit policy
-The verification flags were set to require and explicit policy but none
+The verification flags were set to require an explicit policy but none
 was present.
 .It Dv X509_V_ERR_DIFFERENT_CRL_SCOPE : No different CRL scope
 The only CRLs that could be found did not match the scope of the
@@ -284,7 +284,7 @@ types.
 .It Dv X509_V_ERR_UNSUPPORTED_CONSTRAINT_SYNTAX : \
  No unsupported or invalid name constraint syntax
 The format of the name constraint is not recognised: for example an
-email address format of a form not mentioned in RFC3280.
+email address format of a form not mentioned in RFC 3280.
 This could be caused by a garbage extension or some new feature not
 currently supported.
 .It Dv X509_V_ERR_CRL_PATH_VALIDATION_ERROR : No CRL path validation error