diff --git a/docs/04-certificate-authority.md b/docs/04-certificate-authority.md
index 56cdec2..c9fa7fa 100644
--- a/docs/04-certificate-authority.md
+++ b/docs/04-certificate-authority.md
@@ -333,7 +333,7 @@ cfssl gencert \
 }
 ```
 
-> The `kubernetes` service will get the first address of the `10.32.0.0/24` IP range reserved for cluster services, i.e. `10.32.0.1`. This range is specified later in this tutorial during the control plane bootstrapping.
+> The `kubernetes` service will get the first available address of the `10.32.0.0/24` IP range reserved for cluster services, i.e. `10.32.0.1`. This range is specified later in this tutorial during the control plane bootstrapping.
 
 Results: