diff --git a/roles/rproxy/templates/server.cnf.j2 b/roles/rproxy/templates/server.cnf.j2
index 456c01d..cb6e916 100644
--- a/roles/rproxy/templates/server.cnf.j2
+++ b/roles/rproxy/templates/server.cnf.j2
@@ -16,8 +16,8 @@ emailAddress           = admin@{{ domain.stdout }}
 
 [ v3_req ]
 basicConstraints       = CA:false
-keyUsage               = digitalSignature, keyEncipherment
-subjectAltName         = DNS:*.{{ domain.stdout }}
+keyUsage       = digitalSignature, keyEncipherment
+subjectAltName         = @sans
 
 [ sans ]
 DNS.1 = *.{{ domain.stdout }}