diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index d4e8b15..fbe46e2 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -8,7 +8,7 @@ jobs:
       # To work around https://github.com/duncanthrax/scream/issues/215, create our own self-signed certificate for the Scream driver.
       # makecert.exe insists on interactively asking the user for a password (sigh...), so use OpenSSL instead.
       # `-extensions v3_req` is a trick to make sure the resulting cert has basic constraint CA:FALSE (the default is CA:TRUE which is problematic here) without having to create an OpenSSL config file.
-      - run: 'openssl req -batch -verbose -x509 -newkey rsa -keyout ScreamCertificate.pvk -out ScreamCertificate.cer -nodes -extensions v3_req -addext extendedKeyUsage=codeSigning'
+      - run: 'openssl req -batch -verbose -x509 -newkey rsa -keyout ScreamCertificate.pvk -out ScreamCertificate.cer -nodes -extensions v3_req'
       - run: 'openssl pkcs12 -export -nodes -in ScreamCertificate.cer -inkey ScreamCertificate.pvk -out ScreamCertificate.pfx -passout pass:'
       # This is just to make sure signtool.exe is in the PATH
       - uses: ilammy/msvc-dev-cmd@v1