diff --git a/gen_pki b/gen_pki
index 57da699..c06865b 100755
--- a/gen_pki
+++ b/gen_pki
@@ -59,8 +59,9 @@ subjectAltName = @alt_names
 [alt_names]
 DNS.1 = server.$CLUSTER.$APP
 DNS.2 = client.$CLUSTER.$APP
-DNS.3 = localhost
-DNS.4 = 127.0.0.1
+DNS.3 = $APP.service.$CLUSTER.$APP
+DNS.4 = localhost
+DNS.5 = 127.0.0.1
 EOF
 	) \
 			-CA <(pass $PREFIX/$APP-ca.crt) \