diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index e0d3f10..57e97fd 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -3858,7 +3858,7 @@
 
 	/* at least one of the instances is using filters during the config
 	 * parsing, that's ok to inherit this during loading on CLI */
-	ckchs->filters = !!fcount;
+	ckchs->filters |= !!fcount;
 
 	/* Process each ckch and update keytypes for each CN/SAN
 	 * for example, if CN/SAN www.a.com is associated with
@@ -4102,7 +4102,7 @@
 
 	/* at least one of the instances is using filters during the config
 	 * parsing, that's ok to inherit this during loading on CLI */
-	ckchs->filters = !!fcount;
+	ckchs->filters |= !!fcount;
 
 	ctx = SSL_CTX_new(SSLv23_server_method());
 	if (!ctx) {