diff --git a/token/claimBuilder.go b/token/claimBuilder.go
index d872caf..327f76b 100644
--- a/token/claimBuilder.go
+++ b/token/claimBuilder.go
@@ -237,6 +237,7 @@ func (cb *clientCertificateClaimBuilder) AddClaims(_ context.Context, r *Request
 			CurrentTime:   pc.NotAfter.Add(-time.Second),
 			Roots:         cb.roots,
 			Intermediates: cb.intermediates,
+			KeyUsages:     []x509.ExtKeyUsage{x509.ExtKeyUsageAny},
 		}
 
 		_, verifyErr := pc.Verify(vo)