diff --git a/backend/src/services/certificate-authority/internal/internal-certificate-authority-fns.ts b/backend/src/services/certificate-authority/internal/internal-certificate-authority-fns.ts
index 212c09daf..457863121 100644
--- a/backend/src/services/certificate-authority/internal/internal-certificate-authority-fns.ts
+++ b/backend/src/services/certificate-authority/internal/internal-certificate-authority-fns.ts
@@ -59,7 +59,7 @@ export const InternalCertificateAuthorityFns = ({
     subscriber: TPkiSubscribers,
     ca: Awaited<ReturnType<TCertificateAuthorityDALFactory["findByIdWithAssociatedCa"]>>
   ) => {
-    if (ca.internalCa?.status !== CaStatus.ACTIVE) throw new BadRequestError({ message: "CA is not active" });
+    if (ca.status !== CaStatus.ACTIVE) throw new BadRequestError({ message: "CA is not active" });
     if (!ca.internalCa?.activeCaCertId)
       throw new BadRequestError({ message: "CA does not have a certificate installed" });
 
diff --git a/backend/src/services/pki-subscriber/pki-subscriber-service.ts b/backend/src/services/pki-subscriber/pki-subscriber-service.ts
index 952142fc6..eb7fdbdb8 100644
--- a/backend/src/services/pki-subscriber/pki-subscriber-service.ts
+++ b/backend/src/services/pki-subscriber/pki-subscriber-service.ts
@@ -326,7 +326,7 @@ export const pkiSubscriberServiceFactory = ({
       throw new BadRequestError({ message: "CA does not support ordering of certificates" });
     }
 
-    if (ca.externalCa?.status !== CaStatus.ACTIVE) {
+    if (ca.status !== CaStatus.ACTIVE) {
       throw new BadRequestError({ message: "CA is disabled" });
     }
 
@@ -423,7 +423,7 @@ export const pkiSubscriberServiceFactory = ({
 
     if (subscriber.status !== PkiSubscriberStatus.ACTIVE)
       throw new BadRequestError({ message: "Subscriber is not active" });
-    if (ca.internalCa?.status !== CaStatus.ACTIVE) throw new BadRequestError({ message: "CA is not active" });
+    if (ca.status !== CaStatus.ACTIVE) throw new BadRequestError({ message: "CA is not active" });
     if (!ca.internalCa?.activeCaCertId)
       throw new BadRequestError({ message: "CA does not have a certificate installed" });