cA: TRUE marks a CA certificate; pathLenConstraint limits the number of intermediate CAs below it. RFC 5280 §4.2.1.9 requires the extension, marked critical, in every CA certificate that signs certificates.
2.5.29.19
id-ce-basicConstraints
basicConstraints says whether a certificate belongs to a CA and how many intermediates may follow it.
2.5.29.19 identifies id-ce-basicConstraints, a certificate or CRL extension. DER: 0603551d13.
- Dotted notation
2.5.29.19- DER encoding
0603551d13- Category
- a certificate or CRL extension
- Also known as
basicConstraints- OpenSSL short name
basicConstraints- OpenSSL long name
X509v3 Basic Constraints- Parent
- 2.5.29 id-ce
- Listed by
- the ecdsa.com catalog