FMW 14.1.2 -> WLS_FORMS certificate

I just installed FMW 14.1.2 AND Forms&Reports 14.1.2 … everything Ok (after a lot o discovering wrong documentation).

I replaced the AdminServer with a valid certificate keystore, and it worked OK

When I did the same for WLS_FORMS, it don't started and I notice the following in the log "Extended key usage does not permit use for TLS client authentication"

Looking the certificate is says: #6: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
serverAuth
]

So seems a mismatch between the certificate and the WLS_FORMS requirements

Question: How to generated a .csr using keytool (already tried the /em → security and had the same problem), to contains both serverAuth (which seems to be default, as always comes with) + clientAuth?