diff --git a/templates/10-ssl.conf.j2 b/templates/10-ssl.conf.j2
index 5839747..6e26ed3 100644
--- a/templates/10-ssl.conf.j2
+++ b/templates/10-ssl.conf.j2
@@ -9,7 +9,7 @@ ssl = required
 # dropping root privileges, so keep the key file unreadable by anyone but
 # root. Included doc/mkcert.sh can be used to easily generate self-signed
 # certificate, just make sure to update the domains in dovecot-openssl.cnf
-ssl_cert = </etc/ssl/{{ inventory_hostname }}.crt
+ssl_cert = </etc/ssl/{{ inventory_hostname }}.chain.crt
 ssl_key = </etc/ssl/private/{{ inventory_hostname }}.key
 ssl_dh = </etc/ssl/dh-4096.pem