diff --git a/roles/openvpn/base/tasks/main.yml b/roles/openvpn/base/tasks/main.yml
index 3037fb4141..9a0ba8db1c 100644
--- a/roles/openvpn/base/tasks/main.yml
+++ b/roles/openvpn/base/tasks/main.yml
@@ -20,7 +20,7 @@
   when: ansible_distribution_major_version|int > 7 and ansible_cmdline.ostree is not defined
 
 - name: Install certificate and key (rhel6 and fedora24 and older)
-  copy: src={{ private }}/files/vpn/openvpn/keys/ca.crt
+  copy: src={{ private }}/files/vpn/pki/ca.crt
         dest=/etc/openvpn/ca.crt
         owner=root group=root mode=0600
   tags:
@@ -33,7 +33,7 @@
   when: ansible_distribution_major_version|int < 25
 
 - name: Install certificate and key (rhel7 or fedora) for client
-  copy: src={{ private }}/files/vpn/openvpn/keys/ca.crt
+  copy: src={{ private }}/files/vpn/pki/ca.crt
         dest=/etc/openvpn/client/ca.crt
         owner=root group=root mode=0600
   tags:
@@ -46,7 +46,7 @@
   when: ( ansible_distribution_major_version|int != 6 and ansible_distribution_major_version|int != 24 ) and ansible_cmdline.ostree is not defined
 
 - name: Install certificate and key (rhel7 or fedora) for server
-  copy: src={{ private }}/files/vpn/openvpn/keys/ca.crt
+  copy: src={{ private }}/files/vpn/pki/ca.crt
         dest=/etc/openvpn/server/ca.crt
         owner=root group=root mode=0600
   tags: