diff --git a/src/ca-module.cpp b/src/ca-module.cpp
index 377486f..9058c60 100644
--- a/src/ca-module.cpp
+++ b/src/ca-module.cpp
@@ -283,7 +283,7 @@
   // verify the self-signed certificate, the request, and the token
   if (!m_config.m_caPrefix.isPrefixOf(clientCert->getName()) // under ca prefix
       || !security::v2::Certificate::isValidName(clientCert->getName()) // is valid cert name
-      || clientCert->getName().size() != m_config.m_caPrefix.size() + IS_SUBNAME_MIN_OFFSET) {
+      || clientCert->getName().size() < m_config.m_caName.size() + IS_SUBNAME_MIN_OFFSET) {
     _LOG_ERROR("Invalid self-signed certificate name " << clientCert->getName());
     return;
   }