diff --git a/builtin/logical/pki/cert_util.go b/builtin/logical/pki/cert_util.go
index dd6f5ba16be8..7950ab26676c 100644
--- a/builtin/logical/pki/cert_util.go
+++ b/builtin/logical/pki/cert_util.go
@@ -1416,7 +1416,7 @@ func signCertificate(data *dataBundle) (*certutil.ParsedCertBundle, error) {
 		certTemplate.DNSNames = data.params.DNSNames
 		certTemplate.EmailAddresses = data.params.EmailAddresses
 		certTemplate.IPAddresses = data.params.IPAddresses
-		certTemplate.URIs = data.csr.URIs
+		certTemplate.URIs = data.params.URIs
 	}
 
 	if err := handleOtherSANs(certTemplate, data.params.OtherSANs); err != nil {