diff --git a/tasks/main.yml b/tasks/main.yml
index a49c7a3..70cc1e4 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -36,7 +36,7 @@
   copy:
     src: "/tmp/{{ ssh_ca_key_name }}-cert.pub"
     dest: "/etc/ssh/{{ ssh_ca_key_name }}-cert.pub"
-    mode: 0600
+    mode: 0644
   when: not cert_state.stat.exists
 
 - name: Delete local public key