diff --git a/src/crypto/tls_nss.c b/src/crypto/tls_nss.c
index c53c192..d7fba20 100644
--- a/src/crypto/tls_nss.c
+++ b/src/crypto/tls_nss.c
@@ -293,15 +293,15 @@ static SECStatus nss_bad_cert_cb(void *arg,
PRFileDesc *fd)

 	err = PR_GetError();
 	if (IS_SEC_ERROR(err))
-		wpa_printf(MSG_DEBUG, "NSS: Bad Server Certificate (sec err "
+		wpa_printf(MSG_ERROR, "NSS: Bad Server Certificate (sec err "
 			   "%d)", err - SEC_ERROR_BASE);
 	else
-		wpa_printf(MSG_DEBUG, "NSS: Bad Server Certificate (err %d)",
+		wpa_printf(MSG_ERROR, "NSS: Bad Server Certificate (err %d)",
 			   err);
 	cert = SSL_PeerCertificate(fd);
 	subject = CERT_NameToAscii(&cert->subject);
 	issuer = CERT_NameToAscii(&cert->issuer);
-	wpa_printf(MSG_DEBUG, "NSS: Peer certificate subject='%s' issuer='%s'",
+	wpa_printf(MSG_ERROR, "NSS: Peer certificate subject='%s' issuer='%s'",
 		   subject, issuer);
 	CERT_DestroyCertificate(cert);