diff --git a/basic_configs/ssl/local_cert.cnf b/basic_configs/ssl/local_cert.cnf
index 359ec0d..d66ff4a 100644
--- a/basic_configs/ssl/local_cert.cnf
+++ b/basic_configs/ssl/local_cert.cnf
@@ -12,8 +12,10 @@ localityName = Karachi
 commonName = 272254864.xyz
 
 [v3_req]
-basicConstraints = CA:FALSE
-keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+basicConstraints = CA:true
+subjectKeyIdentifier = hash
+keyUsage = digitalSignature, keyEncipherment
+extendedKeyUsage = serverAuth, clientAuth
 subjectAltName = @alt_names
 
 [alt_names]