diff --git a/certificates.go b/certificates.go
index 2c20e4cb..fdc026c8 100644
--- a/certificates.go
+++ b/certificates.go
@@ -609,6 +609,7 @@ func SubjectIsInternal(subj string) bool {
 		strings.HasSuffix(subj, ".local") ||
 		strings.HasSuffix(subj, ".internal") ||
 		strings.HasSuffix(subj, ".home.arpa") ||
+		strings.HasSuffix(subj, ".test") ||
 		isInternalIP(subj)
 }
 
diff --git a/certificates_test.go b/certificates_test.go
index f8ecc3df..ea744f08 100644
--- a/certificates_test.go
+++ b/certificates_test.go
@@ -167,6 +167,8 @@ func TestSubjectQualifiesForPublicCert(t *testing.T) {
 		{"foo.bar.internal", false},
 		{"foo.home.arpa", false},
 		{"foo.bar.home.arpa", false},
+		{"foo.test", false},
+		{"foo.bar.test", false},
 		{"192.168.1.3", false},
 		{"10.0.2.1", false},
 		{"169.112.53.4", true},