diff --git a/core/java/src/net/i2p/crypto/SelfSignedGenerator.java b/core/java/src/net/i2p/crypto/SelfSignedGenerator.java
index 95e1d158b2..3a3b02a6d3 100644
--- a/core/java/src/net/i2p/crypto/SelfSignedGenerator.java
+++ b/core/java/src/net/i2p/crypto/SelfSignedGenerator.java
@@ -568,7 +568,7 @@ public final class SelfSignedGenerator {
         else
             altNames.remove("0:0:0:0:0:0:0:1");  // We don't want dup of "::1"
         altNames.add(cname);
-        final boolean isCA = !cname.contains("@");
+        final boolean isCA = !cname.contains("@") && !cname.endsWith(".family.i2p.net");
         if (isCA) {
             altNames.add("localhost");
             altNames.add("127.0.0.1");