diff --git a/charts/pulsar/templates/tls/tls-certs-public.yaml b/charts/pulsar/templates/tls/tls-certs-public.yaml
index 3179a9b6d..067ce4b2b 100644
--- a/charts/pulsar/templates/tls/tls-certs-public.yaml
+++ b/charts/pulsar/templates/tls/tls-certs-public.yaml
@@ -30,8 +30,10 @@ spec:
   # Secret names are always required.
   secretName: "{{ .Release.Name }}-{{ .Values.tls.proxy.cert_name }}"
   dnsNames:
+    - "{{ template "pulsar.service_domain" . }}"
     - "*.{{ template "pulsar.service_domain" . }}"
     {{- if .Values.ingress.kop.enabled }}
+    - "{{ .Values.ingress.kop.external_domain }}"
     - "*.{{ .Values.ingress.kop.external_domain }}"
     {{- end }}
   # Issuer references are always required.