diff --git a/fixtures/ca/openssl.cnf b/fixtures/ca/openssl.cnf
index c70a6ac15..a100e38b6 100644
--- a/fixtures/ca/openssl.cnf
+++ b/fixtures/ca/openssl.cnf
@@ -191,7 +191,8 @@ authorityKeyIdentifier=keyid,issuer
 #nsSslServerName
 
 # This is required for TSA certificates.
-# extendedKeyUsage = critical,timeStamping
+# This is required for client Auth and server Auth
+# extendedKeyUsage = critical,timeStamping,serverauth,clientauth
 
 [ v3_req ]