diff --git a/sm/certreqgen-ui.c b/sm/certreqgen-ui.c
index 6ea481529..267c4f4b5 100644
--- a/sm/certreqgen-ui.c
+++ b/sm/certreqgen-ui.c
@@ -388,6 +388,11 @@ gpgsm_gencertreq_tty (ctrl_t ctrl, estream_t output_stream)
   tty_printf (_(" (optional; end with an empty line):\n"));
   ask_mb_lines (&mb_uri, "Name-URI: ");
 
+  /* Extensions */
+  tty_printf (_("Enter extensions"));
+  tty_printf (_(" (optional; end with an empty line):\n"));
+  ask_mb_lines (&mb_uri, "Extension: ");
+
 
   /* Want a self-signed certificate?  */
   selfsigned = tty_get_answer_is_yes
diff --git a/sm/certreqgen.c b/sm/certreqgen.c
index 75343385d..435333298 100644
--- a/sm/certreqgen.c
+++ b/sm/certreqgen.c
@@ -49,6 +49,11 @@
      Signing-Key: 68A638998DFABAC510EA645CE34F9686B2EDF7EA
      %commit
 
+   Commnn extensions:
+     ExtKeyUsage: clientAuth (suggested) serverAuth (suggested)
+     -> 2.5.29.37 n 301406082B0601050507030206082B06010505070301
+
+
 */