diff --git a/hack/gencerts.sh b/hack/gencerts.sh
index eee9b8a351..2837ed9c6f 100755
--- a/hack/gencerts.sh
+++ b/hack/gencerts.sh
@@ -98,6 +98,7 @@ distinguished_name = req_distinguished_name
 basicConstraints = CA:FALSE
 keyUsage = nonRepudiation, digitalSignature, keyEncipherment
 extendedKeyUsage = clientAuth, serverAuth
+subjectAltName = DNS:${SERVICE}.${NAMESPACE}.svc
 EOF
 
 # Create a certificate authority.