diff --git a/backend/src/ee/services/pki-acme/pki-acme-challenge-dal.ts b/backend/src/ee/services/pki-acme/pki-acme-challenge-dal.ts
index 7d77f51bd..03d309c03 100644
--- a/backend/src/ee/services/pki-acme/pki-acme-challenge-dal.ts
+++ b/backend/src/ee/services/pki-acme/pki-acme-challenge-dal.ts
@@ -50,6 +50,8 @@ export const pkiAcmeChallengeDALFactory = (db: TDbClient) => {
                   authStatus: AcmeAuthStatus.Valid
                 }
               )
+              // Only update orders that are pending
+              .where(`${TableName.PkiAcmeOrder}.status`, AcmeOrderStatus.Pending)
               .whereIn(`${TableName.PkiAcmeOrder}.id`, involvedOrderIds);
           })
           .update({ status: AcmeOrderStatus.Ready });