diff --git a/in/public/security/openssl/index.rst b/in/public/security/openssl/index.rst
index f5cd71c..6b8aae1 100644
--- a/in/public/security/openssl/index.rst
+++ b/in/public/security/openssl/index.rst
@@ -119,7 +119,7 @@ Generate a certificate request
   -utf8 \
   -key "private_key.pem" \
   -out "certificate_request.csr" \
-  -addext "subjectAltName=DNS:domain.tld"
+  -addext "subjectAltName=DNS:*.domain.tld,DNS:*.sub.domain.tld"
 
 Human readable: