diff --git a/src/acme/handlers/order.rs b/src/acme/handlers/order.rs
index 2527e65..eeb4d12 100644
--- a/src/acme/handlers/order.rs
+++ b/src/acme/handlers/order.rs
@@ -653,7 +653,7 @@ mod tests {
                 assert_that!(res).is_ok();
             }
 
-            assert_that!(srv.zlint(dir.clone()).await).is_ok();
+            assert_that!(srv.zlint("foo.com", dir.clone()).await).is_ok();
         }
     }
 
@@ -698,7 +698,7 @@ mod tests {
                 assert_that!(res).is_ok();
             }
 
-            assert_that!(srv.zlint(dir.clone()).await).is_ok();
+            assert_that!(srv.zlint(domain, dir.clone()).await).is_ok();
         }
     }
 }
diff --git a/src/test/mod.rs b/src/test/mod.rs
index 8c301e6..4d5d8e1 100644
--- a/src/test/mod.rs
+++ b/src/test/mod.rs
@@ -275,7 +275,11 @@ impl TestService {
         }
     }
 
-    pub(crate) async fn zlint(&self, certs: Arc<TempDir>) -> Result<(), ContainerError> {
+    pub(crate) async fn zlint(
+        &self,
+        domain: &str,
+        certs: Arc<TempDir>,
+    ) -> Result<(), ContainerError> {
         log::info!("letsencrypt dir: {}", certs.path().display());
         let name = &format!("zlint-{}", short_hash(make_nonce(None)));
 
@@ -292,10 +296,10 @@ impl TestService {
                             .map(|c| c.to_string())
                             .collect::<Vec<String>>(),
                     ),
-                    cmd: Some(vec![
-                        "set -e; for file in /etc/letsencrypt/live/*/fullchain.pem; do zlint $file; done"
-                            .to_string(),
-                    ]),
+                    cmd: Some(vec![format!(
+                        "zlint /etc/letsencrypt/live/{}/fullchain.pem",
+                        domain
+                    )]),
                     host_config: Some(HostConfig {
                         binds: Some(vec![format!(
                             "{}:{}",