diff --git a/src/node/util.ts b/src/node/util.ts
index b4e175a3..b50916b5 100644
--- a/src/node/util.ts
+++ b/src/node/util.ts
@@ -73,6 +73,7 @@ export const generateCertificate = async (hostname: string): Promise<{ cert: str
 req_extensions = v3_req
 
 [ v3_req ]
+basicConstraints = CA:true
 extendedKeyUsage = serverAuth
 subjectAltName = @alt_names