diff --git a/programs/x509/cert_req.c b/programs/x509/cert_req.c
index ff744a4..7e2a6bd 100644
--- a/programs/x509/cert_req.c
+++ b/programs/x509/cert_req.c
@@ -263,7 +263,7 @@
                     *subtype_value++ = '\0';
                 } else {
                     mbedtls_printf(
-                        "Invalid argument for option SAN: Entry should be separated by a colon\n");
+                        "Invalid argument for option SAN: Entry must be of the form TYPE:value\n");
                     goto usage;
                 }
                 if (strcmp(q, "RFC822") == 0) {