--- a/certs/localhost.cnf	Sat Oct 08 21:06:43 2016 +0200
+++ b/certs/localhost.cnf	Thu Oct 13 16:30:57 2016 +0200
@@ -1,7 +1,5 @@
 [v3_extensions]
-extendedKeyUsage = serverAuth,clientAuth
-keyUsage = digitalSignature,keyEncipherment
-basicConstraints = CA:FALSE
+basicConstraints = CA:TRUE
 subjectAltName = @subject_alternative_name
 
 [subject_alternative_name]