diff --git a/src/dict.c b/src/dict.c
index 16e0b3fb..19e55e0a 100644
--- a/src/dict.c
+++ b/src/dict.c
@@ -994,6 +994,7 @@ getdns_pp_dict(gldns_buffer * buf, size_t indent,
 			     strcmp(item->node.key, "status") == 0 ||
 			     strcmp(item->node.key, "append_name") == 0 ||
 			     strcmp(item->node.key, "follow_redirects") == 0 ||
+				 strcmp(item->node.key, "transport") == 0 ||
 			     strcmp(item->node.key, "resolution_type") == 0) &&
 			    (strval =
 			     _getdns_get_const_info(item->i.data.n)->name)) {
diff --git a/src/util-internal.c b/src/util-internal.c
index 4b420ca7..fb1d664d 100644
--- a/src/util-internal.c
+++ b/src/util-internal.c
@@ -727,9 +727,11 @@ _getdns_create_call_debugging_dict(getdns_context *context,
 	/* Only include the auth status if TLS was used */
 	if (netreq->upstream->transport == GETDNS_TRANSPORT_TLS) {
 		if (getdns_dict_util_set_string(netreq_debug, "tls_auth", 
-			netreq->debug_tls_auth_status == 0 ? "OK" : "FAILED")) {
-				getdns_dict_destroy(netreq_debug);
-				return NULL;
+			netreq->debug_tls_auth_status == 0 ?
+				"OK: Hostname matched valid cert." :
+				"FAILED: Server not validated.")) {
+					getdns_dict_destroy(netreq_debug);
+					return NULL;
 		}
 	}