Native CLI doesn't work

I used native cli with below process, but doesn't work.

    magnum ca-sign --bay k8sbay --csr client.csr > client.crt
    magnum ca-show --bay k8sbay > ca.crt
    kubectl version --certificate-authority=ca.crt \
               --client-key=client.key \
               --client-certificate=client.crt -s $KUBERNETES_URL
    error: couldn't read version from server: Get https://172.16.12.20:6443/api: x509: certificate is valid for 172.16.12.22, 10.0.0.4, 127.0.0.1, not 172.16.12.20

`172.16.12.20` is LB address, but it isn't included in Server certs SANs.