diff --git a/components/mbedtls/Kconfig b/components/mbedtls/Kconfig
index 5a6a7387bc..705a84af93 100644
--- a/components/mbedtls/Kconfig
+++ b/components/mbedtls/Kconfig
@@ -132,14 +132,14 @@ menu "mbedTLS"
             certificate and private key to ssl config object again.
 
     config MBEDTLS_DYNAMIC_FREE_CA_CERT
-        bool "Free SSL ca certificate after its usage"
+        bool "Free SSL CA certificate after its usage"
         default y
         depends on MBEDTLS_DYNAMIC_FREE_CONFIG_DATA
         help
-            Free ca certificate after its usage in the handshake process.
+            Free CA certificate after its usage in the handshake process.
             This option will decrease the heap footprint for the TLS handshake, but may lead to a problem:
             If the respective ssl object needs to perform the TLS handshake again,
-            the ca certificate should once again be registered to the ssl object.
+            the CA certificate should once again be registered to the ssl object.
 
     config MBEDTLS_DEBUG
         bool "Enable mbedTLS debugging"
diff --git a/components/mbedtls/mbedtls b/components/mbedtls/mbedtls
index 6465247f67..dc406b82b2 160000
--- a/components/mbedtls/mbedtls
+++ b/components/mbedtls/mbedtls
@@ -1 +1 @@
-Subproject commit 6465247f67167518b8813ae2faaf422704e4b1a3
+Subproject commit dc406b82b20481bde74a60fa8a776285d3fb9cf3