diff --git a/config.def.h b/config.def.h
index 57cef76..5fb79de 100644
--- a/config.def.h
+++ b/config.def.h
@@ -152,7 +152,7 @@ static Key keys[] = {
 	{ MODKEY|GDK_SHIFT_MASK, GDK_KEY_n,      find,       { .i = -1 } },
 
 	{ MODKEY|GDK_SHIFT_MASK, GDK_KEY_p,      print,      { 0 } },
-	{ MODKEY,                GDK_KEY_x,      showcert,   { 0 } },
+	{ MODKEY,                GDK_KEY_t,      showcert,   { 0 } },
 
 	{ MODKEY|GDK_SHIFT_MASK, GDK_KEY_a,      togglecookiepolicy, { 0 } },
 	{ 0,                     GDK_KEY_F11,    togglefullscreen, { 0 } },
diff --git a/surf.1 b/surf.1
index 5e04dc5..711a9aa 100644
--- a/surf.1
+++ b/surf.1
@@ -200,7 +200,7 @@ Reloads the website without using the cache.
 .B Ctrl\-y
 Copies current URI to primary selection.
 .TP
-.B Ctrl\-Shift\-x
+.B Ctrl\-t
 Display the current TLS certificate in a popup window.
 .TP
 .B Ctrl\-Shift\-a
diff --git a/surf.c b/surf.c
index 8ecf0f5..007f7b9 100644
--- a/surf.c
+++ b/surf.c
@@ -1332,7 +1332,7 @@ loadfailedtls(WebKitWebView *v, gchar *uri, GTlsCertificate *cert,
 	g_object_get(cert, "certificate-pem", &pem, NULL);
 	html = g_strdup_printf("<p>Could not validate TLS for “%s”<br>%s</p>"
 	                       "<p>You can inspect the following certificate "
-	                       "with Ctrl+Shift+x (default keybinding).</p>"
+	                       "with Ctrl-t (default keybinding).</p>"
 	                       "<p><pre>%s</pre></p>", uri, errmsg->str, pem);
 	g_free(pem);
 	g_string_free(errmsg, TRUE);