1 files changed, 1 insertions, 1 deletions
diff --git a/rcynic/rcynic.c b/rcynic/rcynic.c
index 4c1c5f68..ba0b7352 100644
--- a/rcynic/rcynic.c
+++ b/rcynic/rcynic.c
@@ -3794,7 +3794,7 @@ static int check_x509(rcynic_ctx_t *rc,
 
   if (X509_get_ext_by_NID(x, NID_ext_key_usage, -1) >= 0) {
     ex_count--;
-    if (certinfo->ca) {
+    if (certinfo->ca || !endswith(uri->s, ".cer")) {
       log_validation_status(rc, uri, inappropriate_eku_extension, generation);
       goto done;
     }