diff --git a/cacert.org b/cacert.org
index 7f2947a..373740c 100644
--- a/cacert.org
+++ b/cacert.org
@@ -325,6 +325,14 @@ ns5.cacert.org	43200	IN	AAAA	2a02:c207:3004:6195::1
 ocsp.cacert.org	43200	IN	A	213.154.225.237
 ocsp.cacert.org	43200	IN	AAAA	2001:7b8:616:163::103
 
+; OIDC demo application
+oidcdemo.cacert.org	43200	IN	A	213.154.225.249
+oidcdemo.cacert.org	43200	IN	AAAA	2001:7b8:616:162:3::18
+oidcdemo.cacert.org	43200	IN	SSHFP	3 1 8509283c1a654410269643a14ecd8b9d38e907fc
+oidcdemo.cacert.org	43200	IN	SSHFP	3 2 695160a4d09c9148989fa6973f6ca05044a973e414d26c011d53d8e6f93347f4
+oidcdemo.cacert.org	43200	IN	SSHFP	4 1 0f11d5a25cd6bec2f4c0522f19a2381a61dccbc8
+oidcdemo.cacert.org	43200	IN	SSHFP	4 2 8004f6504bc32bab2025191b8977d910b71433a2263fff979e621924129ede96
+
 ; internal PostgreSQL service
 pgsql.cacert.org	43200	IN	AAAA	2001:7b8:616:162:3::13
 pgsql.cacert.org	43200	IN	SSHFP	1 1 9f6405d67eab3da7b19c9decfd1df73908800cdb