diff --git a/ansible/roles/certificates/templates/openssl-kolla.cnf.j2 b/ansible/roles/certificates/templates/openssl-kolla.cnf.j2
index c9bbce532172156e41268387d3e256293ce9a9ce..e580fa613a27dd3d2a2fc48f152ab62a66df4354 100644
--- a/ansible/roles/certificates/templates/openssl-kolla.cnf.j2
+++ b/ansible/roles/certificates/templates/openssl-kolla.cnf.j2
@@ -14,3 +14,9 @@ subjectAltName = @alt_names
 
 [alt_names]
 IP.1 = {{ kolla_external_vip_address }}
+# NOTE(Xing Zhang): Add IPv6 external VIP address to IP.2 when
+# ipv6-control-plane is implemented.
+#IP.2 =
+{% if kolla_external_fqdn != kolla_external_vip_address %}
+DNS.1 = {{ kolla_external_fqdn }}
+{% endif %}