diff --git a/cmd/csaf_provider/config.go b/cmd/csaf_provider/config.go
index 6868995..c21f1b2 100644
--- a/cmd/csaf_provider/config.go
+++ b/cmd/csaf_provider/config.go
@@ -63,10 +63,10 @@ func (cfg *config) GetOpenPGPURL(key string) string {
 }
 
 func (cfg *config) modelTLPs() []csaf.TLPLabel {
-	tlps := make([]csaf.TLPLabel, len(cfg.TLPs))
+	tlps := make([]csaf.TLPLabel, 0, len(cfg.TLPs))
 	for _, t := range cfg.TLPs {
 		if t != tlpCSAF {
-			tlps = append(tlps, csaf.TLPLabel(t))
+			tlps = append(tlps, csaf.TLPLabel(strings.ToUpper(string(t))))
 		}
 	}
 	return tlps
diff --git a/csaf/models.go b/csaf/models.go
index 4b66811..b5ebac4 100644
--- a/csaf/models.go
+++ b/csaf/models.go
@@ -389,7 +389,7 @@ func NewProviderMetadata(canonicalURL string) *ProviderMetadata {
 func NewProviderMetadataDomain(domain string, tlps []TLPLabel) *ProviderMetadata {
 
 	pm := NewProviderMetadata(
-		domain + "/.wellknown/csaf/provider-metadata.json")
+		domain + "/.well-known/csaf/provider-metadata.json")
 
 	if len(tlps) == 0 {
 		return pm