diff --git a/src/risotto/x509.py b/src/risotto/x509.py
index dbaa046..f6d41f1 100644
--- a/src/risotto/x509.py
+++ b/src/risotto/x509.py
@@ -90,6 +90,8 @@ def _gen_cert(is_ca,
 
     with open(cert_file, "wt") as f:
         f.write(dump_certificate(FILETYPE_PEM, cert).decode("utf-8"))
+        if not is_ca:
+            f.write(dump_certificate(FILETYPE_PEM, ca_cert).decode("utf-8"))
     with open(key_file, "wt") as f:
         f.write(dump_privatekey(FILETYPE_PEM, key).decode("utf-8"))