diff --git a/roles/etcd/templates/openssl.conf.j2 b/roles/etcd/templates/openssl.conf.j2
index 3ea328289a5f6e8945a06e54fada7555de3ef36d..0eef7eaf2d63669d8f6af2a6c5aba5db50db36db 100644
--- a/roles/etcd/templates/openssl.conf.j2
+++ b/roles/etcd/templates/openssl.conf.j2
@@ -28,7 +28,7 @@ DNS.1 = localhost
 DNS.{{ 1 + loop.index }} = {{ host }}
 {% endfor %}
 {% if loadbalancer_apiserver is defined  and apiserver_loadbalancer_domain_name is defined %}
-{% set idx =  groups['etcd'] | length | int + 1 %}
+{% set idx =  groups['etcd'] | length | int + 2 %}
 DNS.{{ idx | string }} = {{ apiserver_loadbalancer_domain_name }}
 {% endif %}
 {% for host in groups['etcd'] %}