diff --git a/roles/basessh/tasks/main.yml b/roles/basessh/tasks/main.yml
index 0f2813bb3a..8a8ae2f0e7 100644
--- a/roles/basessh/tasks/main.yml
+++ b/roles/basessh/tasks/main.yml
@@ -132,6 +132,7 @@
 - name: Get soon-to-expire certificates to sign
   set_fact:
     certs_to_sign: "{{certs_to_sign}} + [ '{{item.item.path}}' ]"
+  with_items: "{{ssh_cert_files.results}}"
   when: "item.stat.exists and item.stat.mtime < (ansible_date_time.epoch - 25920000)"
   tags:
   - basessh