diff --git a/src/shrpx_ssl.cc b/src/shrpx_ssl.cc
index 171e85b9..e6ba31c0 100644
--- a/src/shrpx_ssl.cc
+++ b/src/shrpx_ssl.cc
@@ -1373,10 +1373,10 @@ SSL_CTX *setup_server_ssl_context(std::vector<SSL_CTX *> &all_ssl_ctx,
 
 #if OPENSSL_VERSION_NUMBER >= 0x10002000L
   auto cert = SSL_CTX_get0_certificate(ssl_ctx);
-#else
+#else  // OPENSSL_VERSION_NUMBER < 0x10002000L
   auto cert = load_certificate(tlsconf.cert_file.c_str());
   auto cert_deleter = defer(X509_free, cert);
-#endif
+#endif // OPENSSL_VERSION_NUMBER < 0x10002000L
 
   if (ssl::cert_lookup_tree_add_cert_from_x509(
           cert_tree, all_ssl_ctx.size() - 1, cert) == -1) {
@@ -1399,10 +1399,10 @@ SSL_CTX *setup_server_ssl_context(std::vector<SSL_CTX *> &all_ssl_ctx,
 
 #if OPENSSL_VERSION_NUMBER >= 0x10002000L
     auto cert = SSL_CTX_get0_certificate(ssl_ctx);
-#else
+#else  // OPENSSL_VERSION_NUMBER < 0x10002000L
     auto cert = load_certificate(cert_file.c_str());
     auto cert_deleter = defer(X509_free, cert);
-#endif
+#endif // OPENSSL_VERSION_NUMBER < 0x10002000L
 
     if (ssl::cert_lookup_tree_add_cert_from_x509(
             cert_tree, all_ssl_ctx.size() - 1, cert) == -1) {