diff --git a/easyrsa3/x509-types/code-signing b/easyrsa3/x509-types/code-signing
new file mode 100644
index 0000000..05de2a5
--- /dev/null
+++ b/easyrsa3/x509-types/code-signing
@@ -0,0 +1,8 @@
+# X509 extensions for a client
+
+basicConstraints = CA:FALSE
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid,issuer:always
+extendedKeyUsage = codeSigning
+keyUsage = digitalSignature
+