diff --git a/roles/basessh/tasks/main.yml b/roles/basessh/tasks/main.yml
index 68b9cc128e..e87fdcae28 100644
--- a/roles/basessh/tasks/main.yml
+++ b/roles/basessh/tasks/main.yml
@@ -109,7 +109,7 @@
 
 - name: Set lists of certs to sign to empty
   set_fact:
-    certs_to_sign: ""
+    certs_to_sign: "[]"
   tags:
   - basessh
   - sshd_cert