diff --git a/ipaserver/install/krainstance.py b/ipaserver/install/krainstance.py
index 7f82b755d..79ad853b9 100644
--- a/ipaserver/install/krainstance.py
+++ b/ipaserver/install/krainstance.py
@@ -274,7 +274,7 @@ class KRAInstance(DogtagInstance):
             parentdir = os.path.dirname(paths.ADMIN_CERT_PATH)
             if not os.path.exists(parentdir):
                 os.makedirs(parentdir)
-            with open(paths.ADMIN_CERT_PATH, "w") as admin_path:
+            with open(paths.ADMIN_CERT_PATH, "wb") as admin_path:
                 admin_path.write(
                     base64.b64encode(cert.public_bytes(x509.Encoding.DER))
                 )