diff --git a/templates/openssl_ca.cnf.epp b/templates/openssl_ca.cnf.epp
index 1a6734f..fbfcc12 100644
--- a/templates/openssl_ca.cnf.epp
+++ b/templates/openssl_ca.cnf.epp
@@ -13,3 +13,5 @@ CN = <%= $cn %>
 subjectKeyIdentifier = hash
 authorityKeyIdentifier = keyid:always,issuer:always
 basicConstraints = CA:true
+
+[ v3_req ]