diff --git a/cmd/csaf_checker/processor.go b/cmd/csaf_checker/processor.go
index d7cfd98..877d492 100644
--- a/cmd/csaf_checker/processor.go
+++ b/cmd/csaf_checker/processor.go
@@ -746,7 +746,7 @@ func (p *processor) locateProviderMetadata(
 	}
 
 	for _, loc := range providerMetadataLocations {
-		url := "https://" + domain + "/" + loc
+		url := "https://" + domain + "/" + loc + "/provider-metadata.json"
 		ok, err := tryURL(url)
 		if err != nil {
 			if err == errContinue {