diff --git a/content/articles/2025-08-10-ctlog-2.md b/content/articles/2025-08-10-ctlog-2.md
index 657d6a5..f951d26 100644
--- a/content/articles/2025-08-10-ctlog-2.md
+++ b/content/articles/2025-08-10-ctlog-2.md
@@ -75,10 +75,10 @@ instance, which sets it apart from TesseraCT which can only handle one log per i
 `submissionprefix` which `sunlight` will use to accept writes, and a `monitoringprefix` which
 `skylight` will use for reads.
 
-I stuble across a small issue - I haven't created multiple DNS hostnames for the test machine. So I
+I stumble across a small issue - I haven't created multiple DNS hostnames for the test machine. So I
 decide to use a different port for one versus the other. The write path will use TLS on port 1443
 while Sunlight will point to a normal HTTP port 1080. And considering I don't have a certificate for
-`*.lab.ipng.ch`, I will use a self-signed one instad:
+`*.lab.ipng.ch`, I will use a self-signed one instead:
 
 ```
 pim@ctlog-test:/etc/sunlight$ openssl genrsa -out ca.key 2048