diff --git a/spec/classes/ds389_spec.rb b/spec/classes/ds389_spec.rb
index 938df7c..1275731 100644
--- a/spec/classes/ds389_spec.rb
+++ b/spec/classes/ds389_spec.rb
@@ -18,6 +18,8 @@
 subjectKeyIdentifier = hash
 authorityKeyIdentifier = keyid:always,issuer:always
 basicConstraints = CA:true
+
+[ v3_req ]
 '
   end
 
diff --git a/templates/openssl_ca.cnf.epp b/templates/openssl_ca.cnf.epp
index 1a6734f..fbfcc12 100644
--- a/templates/openssl_ca.cnf.epp
+++ b/templates/openssl_ca.cnf.epp
@@ -13,3 +13,5 @@ CN = <%= $cn %>
 subjectKeyIdentifier = hash
 authorityKeyIdentifier = keyid:always,issuer:always
 basicConstraints = CA:true
+
+[ v3_req ]