diff --git a/src/usr/local/bin/smb-create-self-signed-certificate b/src/usr/local/bin/smb-create-self-signed-certificate
index 68777ab..349d717 100644
--- a/src/usr/local/bin/smb-create-self-signed-certificate
+++ b/src/usr/local/bin/smb-create-self-signed-certificate
@@ -37,13 +37,13 @@ subjectAltName = @alt_names
 DNS.1   = $DOMAINNAME
 DNS.2   = $HOSTNAME.$DOMAINNAME""" > ssl.cnf
 
+# Sign Server Certificate with Root Certificate
+openssl x509 -req -days 365 -in Sunucu.csr -CA KokCA.crt -CAkey KokCA.key  -out Sunucu.crt -sha256 -set_serial 0101 -extensions v3_ca -extfile ssl.cnf
+
 chown root:root $cert_path/Sunucu.key
 chmod 600 $cert_path/Sunucu.key
 chmod 644 $cert_path/Sunucu.crt
 
-# Sign Server Certificate with Root Certificate
-openssl x509 -req -days 365 -in Sunucu.csr -CA KokCA.crt -CAkey KokCA.key  -out Sunucu.crt -sha256 -set_serial 0101 -extensions v3_ca -extfile ssl.cnf
-
 # Edit smb.conf
 if ! grep -q "tls" $smb_conf_path ; then
     sed -i '/^\[sysvol\].*/i tls enabled = yes' $smb_conf_path