system -> settings -> administration save fails

[genfoch01]

opnsense 23.7.12_5

when into system -> settings -> admin   
just wanted to enable password protection on console menu  but when I hit save I get the error

"the following input errors were detected
    Certificate XXXX is not intended for server use "

and my change did not save. 

now, my browser says the cert is valid.  I did create it with my own internal CA

what does "not intended for server use " even mean?  note this is for opnsense not for  openvpn
and why does it work but I can't save any changes on this page?

I would like to solve this before tring to upgrade to 24.x

thanks,
GF

[Fright]

what does "not intended for server use " even mean?

https://www.ssl2buy.com/wiki/what-is-the-difference-between-client-and-server-certificates

when you hit Save button GUI cert key usage extension is checked

[genfoch01]

Thanks for the link! this is not something I have a lot of familiarity with.  I managed to get letencrypt working with the acme plugin which seems a much better solution in the first place.

Thanks again,

GF