diff --git a/clients/src/main/java/org/apache/kafka/common/security/ssl/DefaultSslEngineFactory.java b/clients/src/main/java/org/apache/kafka/common/security/ssl/DefaultSslEngineFactory.java
index 59ee20fe068d2..1528a4a8e0b8d 100644
--- a/clients/src/main/java/org/apache/kafka/common/security/ssl/DefaultSslEngineFactory.java
+++ b/clients/src/main/java/org/apache/kafka/common/security/ssl/DefaultSslEngineFactory.java
@@ -548,8 +548,8 @@ private static KeyFactory keyFactory(String algorithm) {
      *
      *   -----BEGIN ENCRYPTED PRIVATE KEY-----
      *   Base64 private key
-     *   -----BEGIN ENCRYPTED PRIVATE KEY-----
-     *   Additional data may be included before headers, so we match all entres within the PEM.
+     *   -----END ENCRYPTED PRIVATE KEY-----
+     *   Additional data may be included before headers, so we match all entries within the PEM.
      */
     static class PemParser {
         private final String name;