diff --git a/ca/cheese.cfg b/ca/cheese.cfg
index 4b3967a..20141d1 100644
--- a/ca/cheese.cfg
+++ b/ca/cheese.cfg
@@ -4,6 +4,7 @@ default_ca = CA_default
 default_days = 365
 database = index.txt
 serial = serial
+copy_extensions = copy
 new_certs_dir = .
 default_md = sha256
 policy = policy_any
diff --git a/ca/create_all_keys.sh b/ca/create_all_keys.sh
index 0ddf3f6..23d0d5f 100755
--- a/ca/create_all_keys.sh
+++ b/ca/create_all_keys.sh
@@ -18,5 +18,5 @@ cert_apache="/C=PT/ST=Coimbra/L=Coimbra/O=UC/CN=apache"
 [[ -e "user.csr" ]]     || openssl req -new -key user.key -out user.csr -subj "$cert_user"
 [[ -e "user.crt" ]] 	|| openssl ca -batch -in "user.csr" -cert "ca.crt" -keyfile "ca.key" -out "user.crt" -config cheese.cfg
 [[ -e "apache.key" ]]   || openssl genrsa -out apache.key
-[[ -e "apache.csr" ]]   || openssl req -new -key apache.key -out apache.csr -subj "$cert_apache"
+[[ -e "apache.csr" ]]   || openssl req -new -key apache.key -out apache.csr -subj "$cert_apache" -addext "subjectAltName = IP:10.60.0.1,DNS:apache"
 [[ -e "apache.crt" ]] 	|| openssl ca -batch -in "apache.csr" -cert "ca.crt" -keyfile "ca.key" -out "apache.crt" -config cheese.cfg