diff --git a/src/freedombone-addcert b/src/freedombone-addcert
index 5579fb7e..dc16d71a 100755
--- a/src/freedombone-addcert
+++ b/src/freedombone-addcert
@@ -310,7 +310,8 @@ function add_cert_selfsigned {
         CERTFILE="ca-$HOSTNAME"
     fi
 
-    openssl req -x509 "${EXTENSIONS}" -nodes -days 3650 -sha256 \
+    # shellcheck disable=SC2086
+    openssl req -x509 ${EXTENSIONS} -nodes -days 3650 -sha256 \
             -subj "/O=$ORGANISATION/OU=$UNIT/C=$COUNTRY_CODE/ST=$AREA/L=$LOCATION/CN=$HOSTNAME" \
             -newkey rsa:2048 -keyout "/etc/ssl/private/${CERTFILE}.key" \
             -out "/etc/ssl/certs/${CERTFILE}.crt"