diff --git a/provisioners/step.go b/provisioners/step.go
index 982833b90ff9037703c808545bfe73757a4d8502..440ed34ca484a3f8f803efca726474f10efcaaa9 100644
--- a/provisioners/step.go
+++ b/provisioners/step.go
@@ -118,9 +118,13 @@ func (s *Step) Sign(ctx context.Context, cr *certmanager.CertificateRequest) ([]
 	}
 
 	sans := append([]string{}, csr.DNSNames...)
+	sans = append(sans, csr.EmailAddresses...)
 	for _, ip := range csr.IPAddresses {
 		sans = append(sans, ip.String())
 	}
+	for _, u := range csr.URIs {
+		sans = append(sans, u.String())
+	}
 
 	subject := csr.Subject.CommonName
 	if subject == "" {