diff --git a/authority/tls.go b/authority/tls.go
index e7c8eb3d..2baa71f0 100644
--- a/authority/tls.go
+++ b/authority/tls.go
@@ -149,15 +149,15 @@ func (a *Authority) Renew(oldCert *x509.Certificate) ([]*x509.Certificate, error
 		ExtKeyUsage:                 oldCert.ExtKeyUsage,
 		UnknownExtKeyUsage:          oldCert.UnknownExtKeyUsage,
 		BasicConstraintsValid:       oldCert.BasicConstraintsValid,
-		IsCA:                  oldCert.IsCA,
-		MaxPathLen:            oldCert.MaxPathLen,
-		MaxPathLenZero:        oldCert.MaxPathLenZero,
-		OCSPServer:            oldCert.OCSPServer,
-		IssuingCertificateURL: oldCert.IssuingCertificateURL,
-		DNSNames:              oldCert.DNSNames,
-		EmailAddresses:        oldCert.EmailAddresses,
-		IPAddresses:           oldCert.IPAddresses,
-		URIs:                  oldCert.URIs,
+		IsCA:                        oldCert.IsCA,
+		MaxPathLen:                  oldCert.MaxPathLen,
+		MaxPathLenZero:              oldCert.MaxPathLenZero,
+		OCSPServer:                  oldCert.OCSPServer,
+		IssuingCertificateURL:       oldCert.IssuingCertificateURL,
+		DNSNames:                    oldCert.DNSNames,
+		EmailAddresses:              oldCert.EmailAddresses,
+		IPAddresses:                 oldCert.IPAddresses,
+		URIs:                        oldCert.URIs,
 		PermittedDNSDomainsCritical: oldCert.PermittedDNSDomainsCritical,
 		PermittedDNSDomains:         oldCert.PermittedDNSDomains,
 		ExcludedDNSDomains:          oldCert.ExcludedDNSDomains,