diff --git a/salt/files/_pki.conf b/salt/files/_pki.conf
index 489263b..f3e9cb9 100644
--- a/salt/files/_pki.conf
+++ b/salt/files/_pki.conf
@@ -36,6 +36,8 @@
     {%- elif signing_policy.type == 'v3_edge_ca' %}
     - basicConstraints: "CA:TRUE,pathlen:0"
     - keyUsage: "critical cRLSign,keyCertSign"
+    {%- elif signing_policy.type == 'v3_edge_cert_open' %}
+    - basicConstraints: "CA:FALSE"
     {%- endif %}
     - subjectKeyIdentifier: hash
     - authorityKeyIdentifier: keyid,issuer:always