diff --git a/salt/ca/files/signing_policies.conf b/salt/ca/files/signing_policies.conf
index 02aa8cb20..5d82b06f4 100644
--- a/salt/ca/files/signing_policies.conf
+++ b/salt/ca/files/signing_policies.conf
@@ -25,16 +25,16 @@ x509_signing_policies:
     - authorityKeyIdentifier: keyid,issuer:always
     - days_valid: 3000
     - copypath: /etc/pki/issued_certs/
-    master:
-      - minions: '*'
-      - signing_private_key: /etc/pki/ca.key
-      - signing_cert: /etc/pki/ca.crt
-      - C: US
-      - ST: Utah
-      - L: Salt Lake City
-      - basicConstraints: "critical CA:false"
-      - keyUsage: "critical keyEncipherment"
-      - subjectKeyIdentifier: hash
-      - authorityKeyIdentifier: keyid,issuer:always
-      - days_valid: 3000
-      - copypath: /etc/pki/issued_certs/
+  master:
+    - minions: '*'
+    - signing_private_key: /etc/pki/ca.key
+    - signing_cert: /etc/pki/ca.crt
+    - C: US
+    - ST: Utah
+    - L: Salt Lake City
+    - basicConstraints: "critical CA:false"
+    - keyUsage: "critical keyEncipherment"
+    - subjectKeyIdentifier: hash
+    - authorityKeyIdentifier: keyid,issuer:always
+    - days_valid: 3000
+    - copypath: /etc/pki/issued_certs/