diff --git a/lib/hx509/data/openssl.cnf b/lib/hx509/data/openssl.cnf
index 0bf6ed78c..d1841e445 100644
--- a/lib/hx509/data/openssl.cnf
+++ b/lib/hx509/data/openssl.cnf
@@ -66,6 +66,12 @@ basicConstraints=CA:FALSE
 keyUsage = nonRepudiation, keyEncipherment
 subjectKeyIdentifier	= hash
 
+[ proxy_cert ]
+basicConstraints=CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+subjectKeyIdentifier	= hash
+proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:1,policy:text:foo
+
 [ usr_cert_ds ]
 basicConstraints=CA:FALSE
 keyUsage = nonRepudiation, digitalSignature