- extensions "keyUsage" => { "values" => %w[digitalSignature keyEncipherment] },
- "extendedKeyUsage" => { "values" => %w[serverAuth clientAuth] }
+ extensions "keyUsage" => { "values" => %w[digitalSignature keyEncipherment], "critical" => true },
+ "extendedKeyUsage" => { "values" => %w[serverAuth clientAuth], "critical" => true }