diff --git a/demos/x509/mkcert.c b/demos/x509/mkcert.c
index 4709e18e7c95ec30f8b67af102200e99f7b1a3e0..8304d30e0b656f24545483de1ba0b50224a93a35 100644
--- a/demos/x509/mkcert.c
+++ b/demos/x509/mkcert.c
@@ -88,7 +88,7 @@ int mkcert(X509 **x509p, EVP_PKEY **pkeyp, int bits, int serial, int days)
 		}
 	rsa=NULL;
 
-	X509_set_version(x,3);
+	X509_set_version(x,2);
 	ASN1_INTEGER_set(X509_get_serialNumber(x),serial);
 	X509_gmtime_adj(X509_get_notBefore(x),0);
 	X509_gmtime_adj(X509_get_notAfter(x),(long)60*60*24*days);