diff --git a/app.py b/app.py
index fb5a8aa..a301ef0 100644
--- a/app.py
+++ b/app.py
@@ -218,20 +218,18 @@ def create_certificate(ca_id, common_name, san_dns, san_ip, organization, organi
 
     [alt_names]"""
 
-#    if san_dns or san_ip:
-#        csr_config += "\nreq_extensions = req_ext\n[req_ext]\nsubjectAltName = @alt_names\n[alt_names]\n"
+    # 添加DNS SAN条目
+    if san_dns:
+        dns_entries = [dns.strip() for dns in san_dns.split(',') if dns.strip()]
+        for i, dns in enumerate(dns_entries, 1):
+            csr_config += f"\nDNS.{i} = {dns}"
 
-        # 添加DNS SAN条目
-        if san_dns:
-            dns_entries = [dns.strip() for dns in san_dns.split(',') if dns.strip()]
-            for i, dns in enumerate(dns_entries, 1):
-                csr_config += f"\nDNS.{i} = {dns}"
+    # 添加IP SAN条目
+    if san_ip:
+        ip_entries = [ip.strip() for ip in san_ip.split(',') if ip.strip()]
+        for i, ip in enumerate(ip_entries, 1):
+            csr_config += f"\nIP.{i} = {ip}"
 
-        # 添加IP SAN条目
-        if san_ip:
-            ip_entries = [ip.strip() for ip in san_ip.split(',') if ip.strip()]
-            for i, ip in enumerate(ip_entries, 1):
-                csr_config += f"\nIP.{i} = {ip}"
     # 确保配置文件不以空行结尾
     csr_config = csr_config.strip()