diff --git a/acme/autocert/autocert.go b/acme/autocert/autocert.go
index 2ea9e23174..07fda1643e 100644
--- a/acme/autocert/autocert.go
+++ b/acme/autocert/autocert.go
@@ -645,7 +645,7 @@ func (m *Manager) certState(ck certKey) (*certState, error) {
 // authorizedCert starts the domain ownership verification process and requests a new cert upon success.
 // The key argument is the certificate private key.
 func (m *Manager) authorizedCert(ctx context.Context, key crypto.Signer, ck certKey) (der [][]byte, leaf *x509.Certificate, err error) {
-	csr, err := certRequest(key, ck.domain, m.ExtraExtensions)
+	csr, err := certRequest(key, ck.domain, m.ExtraExtensions, ck.domain)
 	if err != nil {
 		return nil, nil, err
 	}