diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index d45ced5..34a6fb3 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -1560,6 +1560,8 @@ expected 2, got $# (see command help for usage)"
 	# Cert type must exist under the EASYRSA_EXT_DIR
 	[ -e "$EASYRSA_EXT_DIR/$crt_type" ] || die "\
 Unknown cert type '$crt_type'"
+	[ -e "$EASYRSA_EXT_DIR/COMMON" ] || die "\
+Missing cert type 'COMMON'"
 
 	# Cert type must NOT be COMMON
 	[ "$crt_type" != COMMON ] || die "\
@@ -1629,8 +1631,10 @@ $(display_dn req "$req_in")
 	ext_tmp="$(easyrsa_mktemp)" || die "Failed to create temporary file"
 	{
 		# Append first any COMMON file (if present) then the cert-type extensions
-		cat "$EASYRSA_EXT_DIR/COMMON"
-		cat "$EASYRSA_EXT_DIR/$crt_type"
+		cat "$EASYRSA_EXT_DIR/COMMON" || \
+			die "Failed to read X509-type COMMON"
+		cat "$EASYRSA_EXT_DIR/$crt_type" || \
+			die "Failed to read X509-type $crt_type"
 
 		# Support a dynamic CA path length when present:
 		[ "$crt_type" = "ca" ] && [ "$EASYRSA_SUBCA_LEN" ] && \