diff --git a/kdc/pkinit.c b/kdc/pkinit.c
index d364c98f3..4ea07ba71 100644
--- a/kdc/pkinit.c
+++ b/kdc/pkinit.c
@@ -718,6 +718,7 @@ pk_initialize(const char *cert_file,
 				   ca_dir,
 				   NULL);
     if (ret) {
+	krb5_warn(context, ret, "PKINIT: failed to load");
 	enable_pkinit = 0;
 	return ret;
     }