diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index f3c7a89..3e5dcc1 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -3599,6 +3599,9 @@ fixed_cert_dates() {
 		die "Fixed off-set range [1-365 days]: $start_fix_day_n"
 	fi
 
+	# Final offset is off-by-one, adjust now
+	start_fix_day_n="$(( start_fix_day_n - 1 ))"
+
 	# Set the end fixed day-number of the Year
 	end_fix_day_n="$(( start_fix_day_n + EASYRSA_CERT_EXPIRE ))"