diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi
index eea2c01ac..0fb7c930a 100644
--- a/html/cgi-bin/vpnmain.cgi
+++ b/html/cgi-bin/vpnmain.cgi
@@ -1031,6 +1031,7 @@ END
 	    nsComment="OpenSSL Generated Certificate"
 	    subjectKeyIdentifier=hash
 	    authorityKeyIdentifier=keyid,issuer:always
+	    extendedKeyUsage = serverAuth
 END
 ;
 	    print $fh "subjectAltName=$cgiparams{'SUBJECTALTNAME'}" if ($cgiparams{'SUBJECTALTNAME'});