diff --git a/ca/bootstrap.go b/ca/bootstrap.go
index cd627fd7..0e0f0fe3 100644
--- a/ca/bootstrap.go
+++ b/ca/bootstrap.go
@@ -65,7 +65,7 @@ func BootstrapClient(ctx context.Context, token string, options ...TLSOption) (*
 		return nil, err
 	}
 
-	// Make sure the tlsConfig have all supported roots on RootCAs.
+	// Make sure the tlsConfig has all supported roots on RootCAs.
 	//
 	// The roots request is only supported if identity certificates are not
 	// required. In all cases the current root is also added after applying all
@@ -123,7 +123,7 @@ func BootstrapServer(ctx context.Context, token string, base *http.Server, optio
 		return nil, err
 	}
 
-	// Make sure the tlsConfig have all supported roots on RootCAs.
+	// Make sure the tlsConfig has all supported roots on RootCAs.
 	//
 	// The roots request is only supported if identity certificates are not
 	// required. In all cases the current root is also added after applying all
@@ -171,7 +171,7 @@ func BootstrapListener(ctx context.Context, token string, inner net.Listener, op
 		return nil, err
 	}
 
-	// Make sure the tlsConfig have all supported roots on RootCAs.
+	// Make sure the tlsConfig has all supported roots on RootCAs.
 	//
 	// The roots request is only supported if identity certificates are not
 	// required. In all cases the current root is also added after applying all