diff --git a/step-ca/configuration.mdx b/step-ca/configuration.mdx
index e96e376a..f1037420 100644
--- a/step-ca/configuration.mdx
+++ b/step-ca/configuration.mdx
@@ -101,7 +101,7 @@ the `--password-file` flag accepts
     "policy": {
       "x509": {
         "allow": {
-          "dns": ["server1.local", "server2.local"]
+          "dns": ["*.local"]
         },
         "allowWildcardNames": false
       },