diff --git a/src/internal.c b/src/internal.c
index aaf46cbc6..0516b8efc 100644
--- a/src/internal.c
+++ b/src/internal.c
@@ -20636,6 +20636,10 @@ const char* wolfSSL_ERR_reason_error_string(unsigned long e)
         return "HTTP Version error";
     case HTTP_APPSTR_ERR:
         return "HTTP Application string error";
+#endif
+#ifdef OPENSSL_EXTRA
+    case -X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY:
+        return "unable to get local issuer certificate";
 #endif
     case UNSUPPORTED_PROTO_VERSION:
         #ifdef OPENSSL_ALL
diff --git a/src/ssl.c b/src/ssl.c
index 632d81254..5cbd9332a 100644
--- a/src/ssl.c
+++ b/src/ssl.c
@@ -59507,8 +59507,8 @@ static int GetX509Error(int e)
             return X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD;
         case ASN_AFTER_DATE_E:
             return X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD;
-        case ASN_NO_SIGNER_E:
-            return X509_V_ERR_INVALID_CA;
+        case ASN_NO_SIGNER_E: /* get issuer error if no CA found locally */
+            return X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY;
         case ASN_SELF_SIGNED_E:
             return X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT;
         case ASN_PATHLEN_INV_E: