diff --git a/cas/cloudcas/certificate.go b/cas/cloudcas/certificate.go
index 51e221b4..ba823d86 100644
--- a/cas/cloudcas/certificate.go
+++ b/cas/cloudcas/certificate.go
@@ -354,7 +354,7 @@ func createKeyVersionSpec(alg kmsapi.SignatureAlgorithm, bits int) (*pb.Certific
 			},
 		}, nil
 	default:
-		return nil, fmt.Errorf("unknown or unsupported signature algorithm '%s'", bits)
+		return nil, fmt.Errorf("unknown or unsupported signature algorithm '%s'", alg)
 	}
 }