diff --git a/src/openvpn/tls_crypt.c b/src/openvpn/tls_crypt.c
index 99e2411..e769190 100644
--- a/src/openvpn/tls_crypt.c
+++ b/src/openvpn/tls_crypt.c
@@ -488,9 +488,9 @@
     {
         dmsg(D_CRYPTO_DEBUG, "tag      : %s", format_hex(tag, sizeof(tag_check), 0, &gc));
         dmsg(D_CRYPTO_DEBUG, "tag_check: %s", format_hex(tag_check, sizeof(tag_check), 0, &gc));
-        CRYPT_ERROR("client key authentication error");
         msg(D_TLS_DEBUG_LOW, "This might be a client-key that was generated for "
-                             "a different tls-crypt-v2 server key)");
+                             "a different tls-crypt-v2 server key");
+        CRYPT_ERROR("client key authentication error");
     }
 
     if (BLENZ(&plaintext) < sizeof(client_key->keys))