diff --git a/lib/ca.go b/lib/ca.go
index 42832a6a2..edac76f58 100644
--- a/lib/ca.go
+++ b/lib/ca.go
@@ -626,7 +626,7 @@ func (ca *CA) initUserRegistry() error {
 	if ldapCfg.Enabled {
 		// Use LDAP for the user registry
 		ca.registry, err = ldap.NewClient(ldapCfg, ca.server.csp)
-		log.Debugf("Initialized LDAP identity registry; err=%s", err)
+		log.Debug("Initialized LDAP identity registry; err=", err)
 		if err == nil {
 			log.Info("Successfully initialized LDAP client")
 		} else {
diff --git a/lib/client.go b/lib/client.go
index 615ccfd38..5e0c84ced 100644
--- a/lib/client.go
+++ b/lib/client.go
@@ -332,7 +332,7 @@ func (c *Client) StoreMyIdentity(cert []byte) error {
 
 // LoadIdentity loads an identity from disk
 func (c *Client) LoadIdentity(keyFile, certFile string) (*Identity, error) {
-	log.Debug("Loading identity: keyFile=%s, certFile=%s", keyFile, certFile)
+	log.Debugf("Loading identity: keyFile=%s, certFile=%s", keyFile, certFile)
 	err := c.Init()
 	if err != nil {
 		return nil, err
diff --git a/lib/servergencrl.go b/lib/servergencrl.go
index 7ee39d8e8..7dc7999f8 100644
--- a/lib/servergencrl.go
+++ b/lib/servergencrl.go
@@ -76,7 +76,7 @@ func genCRLHandler(ctx *serverRequestContext) (interface{}, error) {
 	if err != nil {
 		return nil, err
 	}
-	log.Debugf("Successfully generated CRL: %s\n", crl)
+	log.Debugf("Successfully generated CRL")
 
 	resp := &genCRLResponseNet{CRL: crl}
 	return resp, nil