diff --git a/roles/tsg-diagnose_sync_ca/tasks/main.yml b/roles/tsg-diagnose_sync_ca/tasks/main.yml
index 699b04e..c577a8a 100644
--- a/roles/tsg-diagnose_sync_ca/tasks/main.yml
+++ b/roles/tsg-diagnose_sync_ca/tasks/main.yml
@@ -2,5 +2,5 @@
   shell: rsync -avzP --delete 192.168.100.1::blade0toother /tmp/sync/
 
 - name: "tsg-diagnose: add badssl ca file to tfe tls-ca-bundle"
-  shell: cat /tmp/sync/ca-root.crt >> /opt/tsg/tfe/resource/tfe/tsg_diagnose_ca.pem && cat /tmp/sync/wpr_cert.pem >> /opt/tsg/tfe/resource/tfe/tsg_diagnose_ca.pem
+  shell: cat /tmp/sync/ca-root.crt > /opt/tsg/tfe/resource/tfe/tsg_diagnose_ca.pem && cat /tmp/sync/wpr_cert.pem >> /opt/tsg/tfe/resource/tfe/tsg_diagnose_ca.pem