diff --git a/docs/insecure.md b/docs/insecure.md
index 2de2d30c8..461f9ba96 100644
--- a/docs/insecure.md
+++ b/docs/insecure.md
@@ -72,7 +72,7 @@ This is more secure than the insecure registry solution.
       -x509 -days 365 -out certs/domain.crt
     ```
 
-    Be sure to use the name `myregistrydomain.com` as a CN.
+    Be sure to use the name `myregistry.domain.com` as a CN.
 
 2.  Use the result to [start your registry with TLS enabled](./deploying.md#get-a-certificate).