got it: uncheck 'Enable extended key usage'.

what a diva.