diff --git a/pkg/certmanager/selector.go b/pkg/certmanager/selector.go
index 222b06595..29c56912b 100644
--- a/pkg/certmanager/selector.go
+++ b/pkg/certmanager/selector.go
@@ -60,7 +60,7 @@ func (s *Selector) GetCertificate(hello *tls.ClientHelloInfo) (*tls.Certificate,
 
 	cert, err := s.loadFromDatabase(domain)
 	if err != nil {
-		return nil, err
+		return nil, fmt.Errorf("cannot load certificate from database: %w", err)
 	}
 
 	s.cache.Store(domain, cert)