diff --git a/internal/workflow/engine/executor_bizmonitor.go b/internal/workflow/engine/executor_bizmonitor.go
index e902a2c46..f96a3904d 100644
--- a/internal/workflow/engine/executor_bizmonitor.go
+++ b/internal/workflow/engine/executor_bizmonitor.go
@@ -123,6 +123,7 @@ func (ne *bizMonitorNodeExecutor) execRetrieveCertificates(execCtx *NodeExecutio
 	transport := xhttp.NewDefaultTransport()
 	transport.DisableKeepAlives = true
 	transport.TLSClientConfig = xtls.NewInsecureConfig()
+	transport.TLSClientConfig.ServerName = domain
 
 	client := &http.Client{
 		CheckRedirect: func(req *http.Request, via []*http.Request) error {