diff --git a/autoca/ca.py b/autoca/ca.py
index f15f678a1e606af365d8790313e6f81c8c2938f6..0461ecdec0276497e2624775555df28444166e5a 100644
--- a/autoca/ca.py
+++ b/autoca/ca.py
@@ -85,7 +85,7 @@ class CA(object):
                                  '%sdigitalSignature, keyEncipherment' % (
                     server and '' or 'nonRepudiation, ')),
             crypto.X509Extension('extendedKeyUsage', False,
-                                 server and 'serverAuth' or 'clientAuth'),
+                                 server and 'clientAuth, serverAuth' or 'clientAuth'),
             crypto.X509Extension('nsCertType', False,
                                  server and 'client, server' or 'client'),
             ]