diff --git a/server/src/api.rs b/server/src/api.rs
index c45ddbd..c3ff4db 100644
--- a/server/src/api.rs
+++ b/server/src/api.rs
@@ -288,6 +288,7 @@ impl From<&Certificate> for CertInfo {
             .map(|arg| format!("-O {arg}"))
             .collect::<Vec<_>>()
             .join(" ");
+        let opts = opts.trim();
         let renew_command = format!(
             "ssh-keygen -s ./ca_key {host_key} -I {} -n {} -V {validity_days}d {opts}",
             cert.key_id(),