diff --git a/pkg/database/realm.go b/pkg/database/realm.go
index ca0fc652d..4cdb39931 100644
--- a/pkg/database/realm.go
+++ b/pkg/database/realm.go
@@ -386,7 +386,7 @@ func (r *Realm) BeforeSave(tx *gorm.DB) error {
 	}
 
 	r.CertificateIssuer = trim(r.CertificateIssuer)
-	r.CertificateAudience = trim(r.CertificateIssuer)
+	r.CertificateAudience = trim(r.CertificateAudience)
 	if r.UseRealmCertificateKey {
 		if r.CertificateIssuer == "" {
 			r.AddError("certificateIssuer", "cannot be blank")