diff --git a/contrib/scripts/ast_tls_cert b/contrib/scripts/ast_tls_cert
index 618576b7ef183c5deed5e928508b6fb0c5d525c7..9ed3b7188b4b054d363804e9178b92038920e2ba 100755
--- a/contrib/scripts/ast_tls_cert
+++ b/contrib/scripts/ast_tls_cert
@@ -105,6 +105,8 @@ OUTPUT_BASE=asterisk # Our default cert basename
 CERT_MODE=server
 ORG_NAME=${DEFAULT_ORG}
 
+umask 377
+
 while getopts "hf:c:k:o:d:m:C:O:" OPTION
 do
 	case ${OPTION} in