diff --git a/internal/pkg/core/authority/ca.go b/internal/pkg/core/authority/ca.go
index 27ed096eff2..0ef0dc65cbd 100644
--- a/internal/pkg/core/authority/ca.go
+++ b/internal/pkg/core/authority/ca.go
@@ -140,6 +140,8 @@ func (c *CertificateAuthority) GeneratePairWithName(name string) (*Pair, error)
privateKey, _ := rsa.GenerateKey(rand.Reader, 2048)
publicKey := &privateKey.PublicKey
+ certTemplate.SubjectKeyId = generateSubjectKeyID(publicKey)
+
// Sign the certificate
certBytes, err := x509.CreateCertificate(rand.Reader, certTemplate, c.caCert, publicKey, c.privateKey)
if err != nil {