diff --git a/services/src/main/java/org/keycloak/authentication/authenticators/x509/CertificateValidator.java b/services/src/main/java/org/keycloak/authentication/authenticators/x509/CertificateValidator.java
index cf5ceafdb9..1b9143f7bf 100644
--- a/services/src/main/java/org/keycloak/authentication/authenticators/x509/CertificateValidator.java
+++ b/services/src/main/java/org/keycloak/authentication/authenticators/x509/CertificateValidator.java
@@ -300,7 +300,7 @@ public class CertificateValidator {
                         logger.debugf("Loading CRL from %s", f.getAbsolutePath());
 
                         if (!f.canRead()) {
-                            throw new IOException(String.format("Unable to read CRL from \"%path\"", f.getAbsolutePath()));
+                            throw new IOException(String.format("Unable to read CRL from \"%s\"", f.getAbsolutePath()));
                         }
                         X509CRL crl = loadFromStream(cf, new FileInputStream(f.getAbsolutePath()));
                         return Collections.singleton(crl);
diff --git a/services/src/main/java/org/keycloak/services/x509/AbstractClientCertificateFromHttpHeadersLookup.java b/services/src/main/java/org/keycloak/services/x509/AbstractClientCertificateFromHttpHeadersLookup.java
index 75b432ebc1..83b1b6bfc7 100644
--- a/services/src/main/java/org/keycloak/services/x509/AbstractClientCertificateFromHttpHeadersLookup.java
+++ b/services/src/main/java/org/keycloak/services/x509/AbstractClientCertificateFromHttpHeadersLookup.java
@@ -124,7 +124,7 @@ public abstract class AbstractClientCertificateFromHttpHeadersLookup implements
             // Get the certificate of the client certificate chain
             for (int i = 0; i < certificateChainLength; i++) {
                 try {
-                    String s = String.format("{0}_{1}", sslCertChainHttpHeaderPrefix, i);
+                    String s = String.format("%s_%s", sslCertChainHttpHeaderPrefix, i);
                     cert = getCertificateFromHttpHeader(httpRequest, s);
                     if (cert != null) {
                         chain.add(cert);