diff --git a/roles/radius_server/files/rad_check_client_cert b/roles/radius_server/files/rad_check_client_cert
index feb03bb..cf94f81 100644
--- a/roles/radius_server/files/rad_check_client_cert
+++ b/roles/radius_server/files/rad_check_client_cert
@@ -67,7 +67,7 @@ if ($? != 0 || $expire_check !~ m/^Certificate will not expire/){
 if ($issuer){
   my $issuer_check = qx(openssl x509 -in $cert -noout -issuer);
   chomp($issuer_check);
-  $issuer_check =~ s/^issuer=\s//;
+  $issuer_check =~ s/^issuer=\s*//;
   unless ($issuer_check eq $issuer){
     print "Certificate is signed by $issuer_check instead of $issuer\n";
     exit 1;