diff --git a/crypto.go b/crypto.go
index 558c18cf..ee4671f5 100644
--- a/crypto.go
+++ b/crypto.go
@@ -146,14 +146,14 @@ func (cfg *Config) saveCertResource(issuer Issuer, cert CertificateResource) err
 	certKey := cert.NamesKey()
 
 	all := []keyValue{
-		{
-			key:   StorageKeys.SiteCert(issuerKey, certKey),
-			value: cert.CertificatePEM,
-		},
 		{
 			key:   StorageKeys.SitePrivateKey(issuerKey, certKey),
 			value: cert.PrivateKeyPEM,
 		},
+		{
+			key:   StorageKeys.SiteCert(issuerKey, certKey),
+			value: cert.CertificatePEM,
+		},
 		{
 			key:   StorageKeys.SiteMeta(issuerKey, certKey),
 			value: metaBytes,