diff --git a/modules/nixos/krb5/genso.nix b/modules/nixos/krb5/genso.nix
index 9e676ef9..d04cb8e5 100644
--- a/modules/nixos/krb5/genso.nix
+++ b/modules/nixos/krb5/genso.nix
@@ -109,7 +109,7 @@ in {
         ca.cert = let
           caPem = pkgs.fetchurl {
             name = "${cfg.canonHost}.ca.pem";
-            url = "https://freeipa.${cfg.domain}/ipa/config/ca.crt";
+            url = "https://ipa.${cfg.domain}/ipa/config/ca.crt";
             sha256 = "sha256-PKjnjn1jIq9x4BX8+WGkZfj4HQtmnHqmFSALqggo91o=";
           };
         in mkOptionDefault caPem;