diff --git a/ca.conf b/ca.conf
index 8bfcaed..06be8cc 100644
--- a/ca.conf
+++ b/ca.conf
@@ -174,7 +174,7 @@ req_extensions     = kube-api-server_req_extensions
 basicConstraints     = CA:FALSE
 extendedKeyUsage     = clientAuth, serverAuth
 keyUsage             = critical, digitalSignature, keyEncipherment
-nsCertType           = client
+nsCertType           = server
 nsComment            = "Kube API Server Certificate"
 subjectAltName       = @kube-api-server_alt_names
 subjectKeyIdentifier = hash