diff --git a/roles/rproxy/templates/server.cnf.j2 b/roles/rproxy/templates/server.cnf.j2
index 0a84d5d..16ce8b1 100644
--- a/roles/rproxy/templates/server.cnf.j2
+++ b/roles/rproxy/templates/server.cnf.j2
@@ -1,4 +1,3 @@
-[ req ]
 prompt                 = no
 days                   = 365
 distinguished_name     = {{ rproxy_service_name }}.{{ domain.stdout }}
@@ -15,7 +14,7 @@ commonName             = {{ rproxy_service_name }}.{{ domain.stdout }}
 emailAddress           = admin@{{ domain.stdout }}
 
 [ v3_req ]
-basicConstraints       = critical; CA:false
+basicConstraints       = CA:false
 extendedKeyUsage       = serverAuth
 subjectAltName         = @sans