diff --git a/certificate-authentication.md b/certificate-authentication.md
index 894c3d74c1067..a0fe212ee562d 100644
--- a/certificate-authentication.md
+++ b/certificate-authentication.md
@@ -284,7 +284,7 @@ The user certificate information can be specified by `require subject`, `require
         {{< copyable "shell-regular" >}}
 
         ```shell
-        openssl x509 -noout -ext subjectAltName -in client.crt
+        openssl x509 -noout -extensions subjectAltName -in client.crt
         ```
 
     + `require san` currently supports the following `Subject Alternative Name` check items: