From 8114d667ec92d043bbb4a38adf9eb9ea31dcd1c4 Mon Sep 17 00:00:00 2001
From: Slawek Koszewski <slawek@koszewscy.waw.pl>
Date: Sun, 3 Aug 2025 07:37:55 +0200
Subject: [PATCH] Fixed a bug that prevented adding a mandatory SAN if the
 certificate type is server.

---
 ca.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ca.go b/ca.go
index 29cc238..54ae09d 100644
--- a/ca.go
+++ b/ca.go
@@ -477,7 +477,7 @@ func issueSingleCertificate(def CertificateDefinition) error {
 	}
 
 	// Add default dns SAN for server/server-only if none specified
-	if (def.Type == "server" || def.Type == "server-only") && len(def.SAN) == 0 {
+	if strings.Contains(def.Type, "server") && len(def.SAN) == 0 {
 		def.SAN = append(def.SAN, "dns:"+def.Subject)
 	}