diff --git a/utilities/check_embedded.pl b/utilities/check_embedded.pl
index f630b871..eed5a4df 100755
--- a/utilities/check_embedded.pl
+++ b/utilities/check_embedded.pl
@@ -324,8 +324,9 @@ sub comment {
         #print "   text lines: $#lines\n";
 
         #
-        # Deal with certificate expiry.
+        # Deal with certificate expiry for CA-issued certificates.
         #
+        if ($issuer ne $subject) {
         if ($days < -$longExpiredDays) {
             my $d = floor(-$days);
             if (defined($expiry_whitelist{$fingerprint})) {
@@ -348,7 +349,7 @@ sub comment {
             $days = int($days);
             warning("expires in $days days ($notAfter)");
         }
-
+	}
 
         #
         # Handle public key size.