diff --git a/templates/vault.mkpki.sh b/templates/vault.mkpki.sh
index 6ea43bc..279487a 100644
--- a/templates/vault.mkpki.sh
+++ b/templates/vault.mkpki.sh
@@ -28,9 +28,9 @@ vault secrets tune -max-lease-ttl=[[ .vault.pki.ttl ]] [[ .vault.pki.path ]]
 # Configure PKI URLs
 echo "Configure URL endpoints"
 vault write [[ .vault.pki.path ]]/config/urls \
-  issuing_certificates="${VAULT_ADDR}/v1[[ .vault.pki.path ]]/ca" \
-  crl_distribution_points="${VAULT_ADDR}/v1[[ .vault.pki.path ]]/crl" \
-  ocsp_servers="${VAULT_ADDR}/v1[[ .vault.pki.path ]]/ocsp"
+  issuing_certificates="${VAULT_ADDR}/v1/[[ .vault.pki.path | regexp.Replace "^/" "" ]]/ca" \
+  crl_distribution_points="${VAULT_ADDR}/v1/[[ .vault.pki.path | regexp.Replace "^/" "" ]]/crl" \
+  ocsp_servers="${VAULT_ADDR}/v1/[[ .vault.pki.path | regexp.Replace "^/" "" ]]/ocsp"
 
 vault write [[ .vault.pki.path ]]/config/cluster \
   path="${VAULT_ADDR}/v1[[ .vault.pki.path ]]"