diff --git a/kdc/ipc_csr_authorizer.c b/kdc/ipc_csr_authorizer.c
index 8ca8ec538..d271e3ee1 100644
--- a/kdc/ipc_csr_authorizer.c
+++ b/kdc/ipc_csr_authorizer.c
@@ -260,7 +260,7 @@ mark_authorized(hx509_request csr)
         hx509_san_type san_type;
         ret = hx509_request_get_san(csr, i, &san_type, &s);
         if (ret == 0)
-            hx509_request_authorize_eku(csr, i);
+            hx509_request_authorize_san(csr, i);
         frees(&s);
     }
     return ret == HX509_NO_ITEM ? 0 : ret;