diff --git a/roles/vault/tasks/shared/issue_cert.yml b/roles/vault/tasks/shared/issue_cert.yml
index 3ef31a565..786112d24 100644
--- a/roles/vault/tasks/shared/issue_cert.yml
+++ b/roles/vault/tasks/shared/issue_cert.yml
@@ -73,4 +73,5 @@
     owner: "{{ issue_cert_file_owner | d('root') }}"
   when:
     - inventory_hostname in play_hosts
+    - inventory_hostname == issue_cert_hosts|first
     - issue_cert_copy_ca|default(false)