diff --git a/engine/security/trust/trust_delegation.md b/engine/security/trust/trust_delegation.md
index fd35a8aad5..011c1c1f94 100644
--- a/engine/security/trust/trust_delegation.md
+++ b/engine/security/trust/trust_delegation.md
@@ -74,7 +74,7 @@ can self-sign the certificate (in this example, creating a certificate that is
 valid for 1 year):
 
 ```
-$ openssl x509 -req -days 365 -in delegation.csr -signkey delegation.key -out delegation.crt
+$ openssl x509 -req -sha256 -days 365 -in delegation.csr -signkey delegation.key -out delegation.crt
 ```
 
 Then they need to give you `delegation.crt`, whether it is self-signed or signed