diff --git a/roles/sendmail/templates/sendmail.mc.j2 b/roles/sendmail/templates/sendmail.mc.j2
index 08b04d3..4cd4507 100644
--- a/roles/sendmail/templates/sendmail.mc.j2
+++ b/roles/sendmail/templates/sendmail.mc.j2
@@ -23,11 +23,11 @@ TRUST_AUTH_MECH(`GSSAPI LOGIN PLAIN')dnl
 define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI LOGIN PLAIN')dnl
 dnl #
 define(`confCACERT_PATH', `/etc/mail/certs')dnl
-define(`confCACERT', `/etc/pki/tls/certs/{{ mail_server }}-chain.crt')dnl
-define(`confSERVER_CERT', `/etc/pki/tls/certs/{{ mail_server }}.crt')dnl
-define(`confSERVER_KEY', `/etc/pki/tls/private/{{ mail_server }}.key')dnl
-define(`confCLIENT_CERT', `/etc/pki/tls/certs/{{ mail_server }}.crt')dnl
-define(`confCLIENT_KEY', `/etc/pki/tls/private/{{ mail_server }}.key')dnl
+define(`confCACERT', `{{ tls_certs }}/{{ mail_server }}-chain.crt')dnl
+define(`confSERVER_CERT', `{{ tls_certs }}/{{ mail_server }}.crt')dnl
+define(`confSERVER_KEY', `{{ tls_private }}/{{ mail_server }}.key')dnl
+define(`confCLIENT_CERT', `{{ tls_certs }}/{{ mail_server }}.crt')dnl
+define(`confCLIENT_KEY', `{{ tls_private }}/{{ mail_server }}.key')dnl
 dnl #
 FEATURE(`no_default_msa', `dnl')dnl
 FEATURE(`smrsh', `/usr/sbin/smrsh')dnl