diff --git a/main.go b/main.go
index d39e3d0..3d68b9c 100644
--- a/main.go
+++ b/main.go
@@ -224,6 +224,8 @@ func (m *mkcert) newCA() {
 
 		BasicConstraintsValid: true,
 		IsCA: true,
+		MaxPathLen: 0,
+		MaxPathLenZero: true,
 	}
 
 	pub := priv.PublicKey