diff --git a/build/check_embedded.pl b/build/check_embedded.pl
index 13859bc6..08ba585d 100755
--- a/build/check_embedded.pl
+++ b/build/check_embedded.pl
@@ -242,6 +242,8 @@ sub comment {
 			} elsif ($error eq 'unable to get local issuer certificate') {
 				$error = '';
 				comment("unknown issuer: $issuerCN");
+			} elsif ($clientOK) {
+				$error = "certificate matches trust fabric; add KeyName?";
 			}
 		}