diff --git a/utilities/ofp-pki.in b/utilities/ofp-pki.in
index a6d4521..89a3dba 100755
--- a/utilities/ofp-pki.in
+++ b/utilities/ofp-pki.in
@@ -498,7 +498,7 @@ elif test "$command" = self-sign; then
     must_not_exist "$arg1-cert.pem"
 
     openssl x509 -in "$arg1-req.pem" -out "$arg1-cert.pem" \
-        -signkey "$arg1-privkey.pem" -req -text
+        -signkey "$arg1-privkey.pem" -req -text 2>&3
 elif test "$command" = ls; then
     check_type "$arg2"