diff --git a/certs/localhost.cnf b/certs/localhost.cnf
index 80a954a9e..61d59e729 100644
--- a/certs/localhost.cnf
+++ b/certs/localhost.cnf
@@ -1,7 +1,5 @@
 [v3_extensions]
-extendedKeyUsage = serverAuth,clientAuth
-keyUsage = digitalSignature,keyEncipherment
-basicConstraints = CA:FALSE
+basicConstraints = CA:TRUE
 subjectAltName = @subject_alternative_name
 
 [subject_alternative_name]