backport of commit 0c2fadc (hashicorp#19251)

Co-authored-by: Alexander Scheel <alex.scheel@hashicorp.com>
fopina · Feb 17, 2023 · 1ec3397 · 1ec3397
1 parent fe4d56c
commit 1ec3397
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/website/content/docs/auth/cert.mdx b/website/content/docs/auth/cert.mdx
@@ -11,7 +11,9 @@ description: >-
 @include 'x509-sha1-deprecation.mdx'
 
 The `cert` auth method allows authentication using SSL/TLS client certificates
-which are either signed by a CA or self-signed.
+which are either signed by a CA or self-signed. SSL/TLS client certificates
+are defined as having an `ExtKeyUsage` extension with the usage set to either
+`ClientAuth` or `Any`.
 
 The trusted certificates and CAs are configured directly to the auth method
 using the `certs/` path. This method cannot read trusted certificates from an