diff --git a/backend/bdd/features/steps/pki_acme.py b/backend/bdd/features/steps/pki_acme.py
index 254ea4af4..e08212b9e 100644
--- a/backend/bdd/features/steps/pki_acme.py
+++ b/backend/bdd/features/steps/pki_acme.py
@@ -114,7 +114,7 @@ def step_impl(context: Context, csr_var: str):
 def step_impl(context: Context, csr_var: str):
     names = json.loads(context.text)
     builder: x509.CertificateSigningRequestBuilder = context.vars[csr_var]
-    builder.subject_name(
+    context.vars[csr_var] = builder.subject_name(
         x509.Name(
             [
                 x509.NameAttribute(getattr(NameOID, name), value)
@@ -128,7 +128,7 @@ def step_impl(context: Context, csr_var: str):
 def step_impl(context: Context, csr_var: str):
     names = json.loads(context.text)
     builder: x509.CertificateSigningRequestBuilder = context.vars[csr_var]
-    builder.add_extension(
+    context[csr_var] = builder.add_extension(
         x509.SubjectAlternativeName([x509.DNSName(name) for name in names]),
         critical=False,
     )
diff --git a/backend/src/ee/services/pki-acme/pki-acme-schemas.ts b/backend/src/ee/services/pki-acme/pki-acme-schemas.ts
index 935776a8e..ec2197466 100644
--- a/backend/src/ee/services/pki-acme/pki-acme-schemas.ts
+++ b/backend/src/ee/services/pki-acme/pki-acme-schemas.ts
@@ -80,10 +80,10 @@ export const CreateAcmeAccountResponseSchema = z.object({
 export const CreateAcmeOrderBodySchema = z.object({
   identifiers: z.array(
     z.object({
-      type: z
+      type: z.enum(Object.values(AcmeIdentifierType) as [string, ...string[]]),
+      value: z
         .string()
-        .regex(/^(?!-)[A-Za-z0-9-]{1,63}(?<!-)(\.(?!-)[A-Za-z0-9-]{1,63}(?<!-))*$/, "Invalid DNS identifier"),
-      value: z.enum(Object.values(AcmeIdentifierType) as [string, ...string[]])
+        .regex(/^(?!-)[A-Za-z0-9-]{1,63}(?<!-)(\.(?!-)[A-Za-z0-9-]{1,63}(?<!-))*$/, "Invalid DNS identifier")
     })
   ),
   notBefore: z.string().optional(),