diff --git a/components/certificate-mgt/org.wso2.carbon.certificate.mgt.core/src/main/java/org/wso2/carbon/certificate/mgt/core/impl/CertificateGenerator.java b/components/certificate-mgt/org.wso2.carbon.certificate.mgt.core/src/main/java/org/wso2/carbon/certificate/mgt/core/impl/CertificateGenerator.java
index 71ce11b6b17..b25837154f8 100755
--- a/components/certificate-mgt/org.wso2.carbon.certificate.mgt.core/src/main/java/org/wso2/carbon/certificate/mgt/core/impl/CertificateGenerator.java
+++ b/components/certificate-mgt/org.wso2.carbon.certificate.mgt.core/src/main/java/org/wso2/carbon/certificate/mgt/core/impl/CertificateGenerator.java
@@ -324,9 +324,14 @@ public class CertificateGenerator {
         KeyStoreReader keyStoreReader = new KeyStoreReader();
         if (distinguishedName != null && !distinguishedName.isEmpty()) {
             if (distinguishedName.contains("/CN=")) {
-                String[] dnSplits = distinguishedName.split("/CN=");
-                String commonNameExtracted = dnSplits[dnSplits.length - 1];
-                lookUpCertificate = keyStoreReader.getCertificateBySerial(commonNameExtracted);
+                String[] dnSplits = distinguishedName.split("/");
+                for (String dnPart : dnSplits) {
+                    if (dnPart.contains("CN=")) {
+                        String commonNameExtracted = dnPart.replace("CN=", "");
+                        lookUpCertificate = keyStoreReader.getCertificateBySerial(commonNameExtracted);
+                        break;
+                    }
+                }
             } else {
                 LdapName ldapName;
                 try {
@@ -711,4 +716,4 @@ public class CertificateGenerator {
         return generateCertificateFromCSR(privateKeyCA, certificationRequest,
                 certCA.getIssuerX500Principal().getName());
     }
-}
\ No newline at end of file
+}