diff --git a/config.go b/config.go
index 9179e83b6..27baa58eb 100644
--- a/config.go
+++ b/config.go
@@ -149,6 +149,7 @@ type config struct {
 	DataDir      string `short:"b" long:"datadir" description:"The directory to store lnd's data within"`
 	TLSCertPath  string `long:"tlscertpath" description:"Path to TLS certificate for lnd's RPC and REST services"`
 	TLSKeyPath   string `long:"tlskeypath" description:"Path to TLS private key for lnd's RPC and REST services"`
+	TLSExtraIP   string `long:"tlsextraip" description:"Adds an extra ip to the generated certificate"`
 	NoMacaroons  bool   `long:"no-macaroons" description:"Disable macaroon authentication"`
 	AdminMacPath string `long:"adminmacaroonpath" description:"Path to write the admin macaroon for lnd's RPC and REST services if it doesn't exist"`
 	ReadMacPath  string `long:"readonlymacaroonpath" description:"Path to write the read-only macaroon for lnd's RPC and REST services if it doesn't exist"`
diff --git a/lnd.go b/lnd.go
index 0bdacbebe..2d27b6b43 100644
--- a/lnd.go
+++ b/lnd.go
@@ -608,6 +608,12 @@ func genCertPair(certFile, keyFile string) error {
 		}
 	}
 
+	// Add extra IP to the slice.
+	ipAddr := net.ParseIP(cfg.TLSExtraIP)
+	if ipAddr != nil {
+		addIP(ipAddr)
+	}
+
 	// Collect the host's names into a slice.
 	host, err := os.Hostname()
 	if err != nil {