diff --git a/ssl-ca b/ssl-ca
index 8dc728a1dd16de8344dfec9f8ba5d69d39331c25..d3fced5c74b7ac4b94b758a254106efb02a8a0a4 100755
--- a/ssl-ca
+++ b/ssl-ca
@@ -39,7 +39,11 @@ basicConstraints = CA:true
 
 [ v3_req ]
 basicConstraints = CA:false
-subjectAltName = DNS:*.\${ENV::cn}
+subjectAltName = @AltNames
+
+[ AltNames ]
+DNS.1 = \${ENV::cn}
+DNS.2 = *.\${ENV::cn}
 "
 
 usage () {