diff --git a/hopsworks-ca/src/main/java/io/hops/hopsworks/ca/controllers/PKI.java b/hopsworks-ca/src/main/java/io/hops/hopsworks/ca/controllers/PKI.java
index 276ba5910b..2de0f270c2 100644
--- a/hopsworks-ca/src/main/java/io/hops/hopsworks/ca/controllers/PKI.java
+++ b/hopsworks-ca/src/main/java/io/hops/hopsworks/ca/controllers/PKI.java
@@ -927,7 +927,9 @@ GeneralName[] getSanForUsername(String username, String region) {
         onlinefsDomain.add(HopsworksService.MYSQL.getNameWithTag(MysqlTags.onlinefs));
         return convertToGeneralNames(onlinefsDomain, true, region);
       case "elastic":
-        return convertToGeneralNames(HopsworksService.LOGSTASH.domains(), true, region);
+        return convertToGeneralNames(mergeSets(
+            HopsworksService.LOGSTASH.domains(), HopsworksService.OPENSEARCH.domains()),
+            true, region);
       case "flyingduck":
         return convertToGeneralNames(HopsworksService.FLYING_DUCK.domains(), true, region);
       case "kagent":