diff --git a/confluent_osdeploy/suse15/profiles/hpc/scripts/post.sh b/confluent_osdeploy/suse15/profiles/hpc/scripts/post.sh
index 23fe6883..41ac2208 100644
--- a/confluent_osdeploy/suse15/profiles/hpc/scripts/post.sh
+++ b/confluent_osdeploy/suse15/profiles/hpc/scripts/post.sh
@@ -45,5 +45,5 @@ cp /tmp/confluent.* /mnt/etc/confluent/
 cp -a /tls /mnt/etc/confluent/
 cp -a /tls/* /mnt/var/lib/ca-certificates/openssl
 cp -a /tls/* /mnt/var/lib/ca-certificates/pem
-cp -a /tls/*.cert /mnt/etc/pki/trust/anchors
+cp -a /tls/*.pem /mnt/etc/pki/trust/anchors
 
diff --git a/confluent_server/bin/confluentcertutil.py b/confluent_server/bin/confluentcertutil.py
index d0cbaacd..dfa89551 100644
--- a/confluent_server/bin/confluentcertutil.py
+++ b/confluent_server/bin/confluentcertutil.py
@@ -61,7 +61,7 @@ def create_certificate(outdir):
         ])
     finally:
         os.remove(tmpconfig)
-    fname = '/var/lib/confluent/public/site/tls/{0}.cert'.format(
+    fname = '/var/lib/confluent/public/site/tls/{0}.pem'.format(
         collective.get_myname())
     shutil.copy2(certout, fname)
     hv = subprocess.check_output(
@@ -70,7 +70,7 @@ def create_certificate(outdir):
         hv = hv.decode('utf8')
     hv = hv.strip()
     hashname = '/var/lib/confluent/public/site/tls/{0}.0'.format(hv)
-    certname = '{0}.cert'.format(collective.get_myname())
+    certname = '{0}.pem'.format(collective.get_myname())
     for currname in os.listdir('/var/lib/confluent/public/site/tls/'):
         currname = os.path.join('/var/lib/confluent/public/site/tls/', currname)
         if currname.endswith('.0'):