diff --git a/registry/openssl.conf b/registry/openssl.conf
index 0b1225a..206e4b0 100644
--- a/registry/openssl.conf
+++ b/registry/openssl.conf
@@ -1,18 +1,19 @@
 [ req ]
-default_bits       = 2048
+default_bits       = 4096
 prompt             = no
 default_md         = sha256
-req_extensions     = req_ext
 distinguished_name = dn
+req_extensions     = req_ext
 
 [ dn ]
-O=YOUR_REGISTRY_NAME
-CN=YOUR_CI_CD_IP
+O = YOUR_REGISTRY_NAME
+CN = YOUR_CI_CD_IP
 
 [ req_ext ]
+basicConstraints = CA:FALSE
+keyUsage = digitalSignature, keyEncipherment
+extendedKeyUsage = serverAuth
 subjectAltName = @alt_names
 
 [ alt_names ]
-DNS.1 = localhost
-IP.1 = YOUR_CI_CD_IP
-IP.2 = 127.0.0.1
\ No newline at end of file
+IP.1 = YOUR_CI_CD_IP
\ No newline at end of file