diff --git a/modules/pki.nix b/modules/pki.nix
index d24a039..4664c31 100644
--- a/modules/pki.nix
+++ b/modules/pki.nix
@@ -44,7 +44,7 @@ let
             L = "generated";
           }
         ];
-        hosts = [ "${args.hosts}" ];
+        hosts = args.hosts;
       };
     in
       pkgs.writeText "${args.cn}-csr.json" (builtins.toJSON csr);
@@ -61,7 +61,7 @@ rec {
       conf = {
         cn = attrs.cn;
         ca = attrs.ca;
-        csr = gencsr { cn = attrs.cn; o = attrs.o; hosts = ""; };
+        csr = gencsr { cn = attrs.cn; o = attrs.o; hosts = attrs.hosts; };
       };
       cfssl = conf:
         ''