diff --git a/salt/ssl/init.sls b/salt/ssl/init.sls
index 7f235c6ee..7cf98ef37 100644
--- a/salt/ssl/init.sls
+++ b/salt/ssl/init.sls
@@ -72,6 +72,8 @@ fbcrtlink:
     - signing_policy: filebeat
     - public_key: /opt/so/conf/filebeat/etc/pki/filebeat.key
     - CN: {{ master }}
+    - keyUsage: "digitalSignature, nonRepudiation"
+    - extendedkeyUsage: "serverAuth, clientAuth"
     - days_remaining: 3000
     - backup: True
     - managed_private_key: