diff --git a/util/winutil/authenticode/authenticode_windows.go b/util/winutil/authenticode/authenticode_windows.go
index f6304f6db..1ed0b7cfb 100644
--- a/util/winutil/authenticode/authenticode_windows.go
+++ b/util/winutil/authenticode/authenticode_windows.go
@@ -104,9 +104,12 @@ func queryPE(utf16Path *uint16, verify bool) (string, SigProvenance, error) {
 	}
 }
 
+// CertSubjectError is returned if a cert subject was successfully resolved but
+// there was a problem encountered during its extraction. The Subject is
+// provided for informational purposes but is not presumed to be accurate.
 type CertSubjectError struct {
-	Err     error
-	Subject string
+	Err     error  // The error that occurred while extracting the cert subject.
+	Subject string // The (possibly invalid) cert subject that was extracted.
 }
 
 func (e *CertSubjectError) Error() string {