diff --git a/cipherscan b/cipherscan
index 9b6f302..429561d 100755
--- a/cipherscan
+++ b/cipherscan
@@ -1340,6 +1340,11 @@ do
     esac
 done
 
+if [[ -n $CAPATH && -n $CACERTS ]]; then
+    echo "Both directory and file with CA certificates specified" 1>&2
+    exit 1
+fi
+
 # echo parameters left: $@
 
 TEMPTARGET=$(sed -e 's/^.* //'<<<"${@}")