diff --git a/lib/hiera/backend/eyaml/encryptors/pkcs7.rb b/lib/hiera/backend/eyaml/encryptors/pkcs7.rb
index 596963d..eb1580d 100644
--- a/lib/hiera/backend/eyaml/encryptors/pkcs7.rb
+++ b/lib/hiera/backend/eyaml/encryptors/pkcs7.rb
@@ -55,6 +55,7 @@ def self.decrypt(ciphertext)
 
             public_key_x509 = OpenSSL::X509::Certificate.new
             public_key_x509.serial = pkcs7.recipients[0].serial
+            public_key_x509.issuer = pkcs7.recipients[0].issuer
             public_key_x509.public_key = private_key_rsa.public_key
 
             pkcs7.decrypt(private_key_rsa, public_key_x509)