diff --git a/include/psa/crypto.h b/include/psa/crypto.h
index 69c93dd..95c8948 100644
--- a/include/psa/crypto.h
+++ b/include/psa/crypto.h
@@ -428,7 +428,7 @@
  *   is the non-encrypted DER representation defined by PKCS\#8 (RFC 5208)
  *   as PrivateKeyInfo.
  * - For RSA public keys (#PSA_KEY_TYPE_RSA_PUBLIC_KEY), the format
- *   is the DER representation defined by X.509.
+ *   is the DER representation defined by RFC 5280 as SubjectPublicKeyInfo.
  *
  * \param key           Slot whose content is to be exported. This must
  *                      be an occupied key slot.
@@ -458,7 +458,8 @@
  * For standard key types, the output format is as follows:
  *
  * - For RSA keys (#PSA_KEY_TYPE_RSA_KEYPAIR or #PSA_KEY_TYPE_RSA_PUBLIC_KEY),
- *   the format is the DER representation defined by X.509.
+ *   is the DER representation of the public key defined by RFC 5280
+ *   as SubjectPublicKeyInfo.
  *
  * \param key           Slot whose content is to be exported. This must
  *                      be an occupied key slot.