diff --git a/lib/krb5/krb5.conf.5 b/lib/krb5/krb5.conf.5
index d7ee7ae1d..80afc806e 100644
--- a/lib/krb5/krb5.conf.5
+++ b/lib/krb5/krb5.conf.5
@@ -193,7 +193,7 @@ fatal error.
 The application has to be able to read the corresponding service key
 for this to work.
 Some applications, like
-.Xr su 8 ,
+.Xr su 1 ,
 enable this option unconditionally.
 .It Li warn_pwexpire = Va time
 How soon to warn for expiring password.
@@ -397,7 +397,7 @@ and is only left for backwards compatibility.
 .Sh ENVIRONMENT
 .Ev KRB5_CONFIG
 points to the configuration file to read.
-.Sh EXAMPLE
+.Sh EXAMPLES
 .Bd -literal -offset indent
 [libdefaults]
 	default_realm = FOO.SE
diff --git a/lib/krb5/krb5_get_krbhst.3 b/lib/krb5/krb5_get_krbhst.3
index 40bf9c557..be7ade37d 100644
--- a/lib/krb5/krb5_get_krbhst.3
+++ b/lib/krb5/krb5_get_krbhst.3
@@ -71,7 +71,7 @@ is a
 terminated list of strings, pointing to the requested Kerberos hosts. These should be freed with
 .Fn krb5_free_krbhst
 when done with.
-.Sh EXAMPLE
+.Sh EXAMPLES
 The following code will print the KDCs of the realm
 .Dq MY.REALM .
 .Bd -literal -offset indent
diff --git a/lib/krb5/krb5_verify_user.3 b/lib/krb5/krb5_verify_user.3
index 91ec4cf60..2e4193a71 100644
--- a/lib/krb5/krb5_verify_user.3
+++ b/lib/krb5/krb5_verify_user.3
@@ -180,7 +180,7 @@ The principal whose password will be verified is specified in
 .Fa principal .
 Options the to the verification process is pass in in
 .Fa opt .
-.Sh EXAMPLE
+.Sh EXAMPLES
 Here is a example program that verifies a password. it uses the
 .Ql host/`hostname`
 service principal in