diff --git a/rootfs/etc/nginx/template/nginx.tmpl b/rootfs/etc/nginx/template/nginx.tmpl
index a8b32429b..ff6eedcd0 100644
--- a/rootfs/etc/nginx/template/nginx.tmpl
+++ b/rootfs/etc/nginx/template/nginx.tmpl
@@ -757,7 +757,7 @@ stream {
             # Pass the extracted client certificate to the backend
             {{ if not (empty $server.CertificateAuth.CAFileName) }}
             {{ if $server.CertificateAuth.PassCertToUpstream }}
-            proxy_set_header ssl-client-cert        $ssl_client_raw_cert;
+            proxy_set_header ssl-client-cert        $ssl_client_escaped_cert;
             {{ else }}
             proxy_set_header ssl-client-cert        "";
             {{ end }}