--- a/certs/localhost.cnf	Sun Oct 09 21:48:53 2016 +0200
+++ b/certs/localhost.cnf	Thu Oct 13 16:31:19 2016 +0200
@@ -1,7 +1,5 @@
 [v3_extensions]
-extendedKeyUsage = serverAuth,clientAuth
-keyUsage = digitalSignature,keyEncipherment
-basicConstraints = CA:FALSE
+basicConstraints = CA:TRUE
 subjectAltName = @subject_alternative_name
 
 [subject_alternative_name]