diff --git a/salt/ca/files/signing_policies.conf b/salt/ca/files/signing_policies.conf
index 8310257fb..aa99b602a 100644
--- a/salt/ca/files/signing_policies.conf
+++ b/salt/ca/files/signing_policies.conf
@@ -36,8 +36,8 @@ x509_signing_policies:
     - C: US
     - ST: Utah
     - L: Salt Lake City
-    - basicConstraints: "critical CA:false digitalSignature"
-    - keyUsage: "critical keyEncipherment"
+    - basicConstraints: "critical CA:false"
+    - keyUsage: "critical keyEncipherment digitalSignature"
     - subjectKeyIdentifier: hash
     - authorityKeyIdentifier: keyid,issuer:always
     - extendedKeyUsage: serverAuth