diff --git a/pkg/issuer/ca/issue.go b/pkg/issuer/ca/issue.go
index c36c26edb..213153187 100644
--- a/pkg/issuer/ca/issue.go
+++ b/pkg/issuer/ca/issue.go
@@ -151,5 +151,12 @@ func signCertificate(crt *v1alpha1.Certificate, issuerCert *x509.Certificate, pu
 	if err != nil {
 		return nil, nil, fmt.Errorf("error encoding certificate PEM: %s", err.Error())
 	}
+
+	// bundle the CA
+	err = pem.Encode(pemBytes, &pem.Block{Type: "CERTIFICATE", Bytes: issuerCert.Raw})
+	if err != nil {
+		return nil, nil, fmt.Errorf("error encoding issuer cetificate PEM: %s", err.Error())
+	}
+
 	return pemBytes.Bytes(), cert, err
 }