diff --git a/test/rsa_genpkey_x509_csr.sh b/test/rsa_genpkey_x509_csr.sh
index 2eb22fb..9edcace 100755
--- a/test/rsa_genpkey_x509_csr.sh
+++ b/test/rsa_genpkey_x509_csr.sh
@@ -18,8 +18,8 @@ openssl req -verify -in server.csr -text -noout
 
 # issue the certificate by the TPM-based CA
 openssl x509 -provider tpm2 -provider default -propquery '?provider=tpm2' \
-    -req -in server.csr -CAkey rootca.key -CA rootca.crt -CAcreateserial -out server.crt
+    -req -in server.csr -CAkey rootca.key -CA rootca.crt -CAserial rootca.srl -CAcreateserial -out server.crt
 # check the certificate
 openssl x509 -in server.crt -text -noout
 
-rm rootca.key rootca.crt server.key server.csr server.crt
+rm rootca.key rootca.crt rootca.srl server.key server.csr server.crt