diff --git a/run-proxy b/run-proxy
index 7d77838..322896c 100755
--- a/run-proxy
+++ b/run-proxy
@@ -190,7 +190,7 @@ http {
     ssl_verify_client on;
 
     location ${LOCATION} {
-      if (\$ssl_client_s_dn_cn !~ "${USER}") {
+      if (\$ssl_client_s_dn_cn !~ "^${USER}$") {
         return 403;
       }
       proxy_http_version 1.1;