diff --git a/setup_test_ca.sh b/setup_test_ca.sh
index 9a9a3b3..4c7ea0a 100755
--- a/setup_test_ca.sh
+++ b/setup_test_ca.sh
@@ -133,8 +133,7 @@ if [ ! -f root/ca.crt.pem ]; then
   openssl req -new -x509 -config ca.cnf \
     -keyout root/private/ca.key.pem \
     -nodes \
-    -subj "/CN=Test Root/C=${COUNTRY_CODE}/O=${ORGANIZATION}" \
-    -days 3650 \
+    -subj "/C=${COUNTRY_CODE}/O=${ORGANIZATION}/CN=Test Root" \
     -extensions root_extensions \
     -out root/ca.crt.pem
 fi