diff --git a/pki/pki.go b/pki/pki.go
index c7c5ec1c..d52f247e 100644
--- a/pki/pki.go
+++ b/pki/pki.go
@@ -289,6 +289,10 @@ func (p *PKI) WriteRootCertificate(rootCrt *x509.Certificate, rootKey interface{
 	if err != nil {
 		return err
 	}
+
+	sum := sha256.Sum256(rootCrt.Raw)
+	p.rootFingerprint = strings.ToLower(hex.EncodeToString(sum[:]))
+
 	return nil
 }