diff --git a/internal/clis/hmpki/generate_client_cert.go b/internal/clis/hmpki/generate_client_cert.go
index 08c8294..65f81de 100644
--- a/internal/clis/hmpki/generate_client_cert.go
+++ b/internal/clis/hmpki/generate_client_cert.go
@@ -55,7 +55,7 @@ var generateClientCertCmd = &cobra.Command{
 			return err
 		}
 
-		certKey := pki.NewKey()
+		crtKey := pki.NewKey()
 		clientCrtTmpl := &x509.Certificate{
 			SerialNumber: pki.NewCertSerialNumber(),
 			Subject: pkix.Name{
@@ -78,7 +78,7 @@ var generateClientCertCmd = &cobra.Command{
 			// CA is the parent.
 			ca,
 			// The cert embeds its own public key.
-			&certKey.PublicKey,
+			&crtKey.PublicKey,
 			// The CA's private key is the one signing the leaf cert.
 			caKey,
 		)
@@ -95,7 +95,7 @@ var generateClientCertCmd = &cobra.Command{
 		}
 		// Write cert private key to disk.
 		keyfn := path.Join(OutDir, Name+".key")
-		err = createFileWith(keyfn, pki.MarshalKeyToPEM(certKey), pki.PrivateKeyFilePerms)
+		err = createFileWith(keyfn, pki.MarshalKeyToPEM(crtKey), pki.PrivateKeyFilePerms)
 		if err != nil {
 			return err
 		}