diff --git a/client.go b/client.go
index 5a7f682..23d8f92 100644
--- a/client.go
+++ b/client.go
@@ -241,7 +241,7 @@ func (c *Client) verifyConnection(req *Request, cs tls.ConnectionState) error {
 	}
 
 	fingerprint := NewFingerprint(cert.Raw, cert.NotAfter)
-	if !bytes.Equal(knownHost.Raw, fingerprint.Raw) {
+	if bytes.Equal(knownHost.Raw, fingerprint.Raw) {
 		return nil
 	}
 	return errors.New("gemini: fingerprint does not match")