diff --git a/tasks/ca.yaml b/tasks/ca.yaml
index cd22182..56c28c4 100644
--- a/tasks/ca.yaml
+++ b/tasks/ca.yaml
@@ -80,6 +80,7 @@
       copy:
         content: "{{ cacert_ca_cert }}"
         dest: "{{ host_item.path }}/{{ cacert_ca_name }}.crt"
+        mode: 0644
       loop: "{{ cacert_ca_copy_to.hosts }}"
       loop_control:
         loop_var: host_item
@@ -90,6 +91,7 @@
       copy:
         content: "{{ cacert_ca_cert }}"
         dest: "/etc/pki/ca-trust/source/anchors/{{ cacert_ca_name }}.crt"
+        mode: 0644
       loop: "{{ cacert_ca_copy_to.hosts }}"
       loop_control:
         loop_var: host_item
@@ -127,6 +129,7 @@
       copy:
         content: "{{ cacert_ca_cert }}"
         dest: "{{ group_item.path }}/{{ cacert_ca_name }}.crt"
+        mode: 0644
       loop: "{{ cacert_ca_copy_to.groups }}"
       loop_control:
         loop_var: group_item
@@ -137,6 +140,7 @@
       copy:
         content: "{{ cacert_ca_cert }}"
         dest: "/etc/pki/ca-trust/source/anchors/{{ cacert_ca_name }}.crt"
+        mode: 0644
       loop: "{{ cacert_ca_copy_to.groups }}"
       loop_control:
         loop_var: group_item