diff --git a/op-mode-definitions/pki.xml.in b/op-mode-definitions/pki.xml.in
index f76b4f4e14..254ef08cc1 100644
--- a/op-mode-definitions/pki.xml.in
+++ b/op-mode-definitions/pki.xml.in
@@ -490,6 +490,7 @@
         <properties>
           <help>Show PKI x509 certificates</help>
         </properties>
+        <command>sudo ${vyos_op_scripts_dir}/pki.py --action show</command>
         <children>
           <leafNode name="ca">
             <properties>
@@ -570,7 +571,6 @@
             </children>
           </tagNode>
         </children>
-        <command>${vyos_op_scripts_dir}/pki.py --action show</command>
       </node>
     </children>
   </node>