diff --git a/roles/openssl-common/tasks/main.yml b/roles/openssl-common/tasks/main.yml
index 84aa921..51664cf 100644
--- a/roles/openssl-common/tasks/main.yml
+++ b/roles/openssl-common/tasks/main.yml
@@ -19,7 +19,7 @@
     - name: ssl/private
       mode: u=rwx,g=,o=
     - name: ssl/csr
-      mode: u=rwx,g=,o=
+      mode: u=rwx,g=rx,o=rx
     - name: ssl/certs
       mode: u=rwx,g=rx,o=rx
 ...
\ No newline at end of file