diff --git a/salt/ca/files/signing_policies.conf b/salt/ca/files/signing_policies.conf
index 1e05be0063..8310257fb9 100644
--- a/salt/ca/files/signing_policies.conf
+++ b/salt/ca/files/signing_policies.conf
@@ -36,7 +36,7 @@ x509_signing_policies:
     - C: US
     - ST: Utah
     - L: Salt Lake City
-    - basicConstraints: "critical CA:false"
+    - basicConstraints: "critical CA:false digitalSignature"
     - keyUsage: "critical keyEncipherment"
     - subjectKeyIdentifier: hash
     - authorityKeyIdentifier: keyid,issuer:always