The basic constraints parameter allows you to define the basic constraints extensions.
Includes basic constraints in the certificate |
|---|
{
...
"extensions": {
"basic_constraints": {
"include": "yes",
"ca": true
"path_length": 2
}
}
} |
Do not include basic constraints in the certificate |
{
...
"extensions": {
"basic_constraints": {
"include": "no"
}
}
} |
Name | Type | Req/Opt | Description |
|---|---|---|---|
basic_constraints | object | optional | Basic constraint details |
.. include | string | optional | Define if basic constraints are included in the certificate. Possible values:
|
.. ca | boolean | optional | If false, the certificate is not a certificate authority (CA) certificate. If true, the certificate is a CA certificate. If set to true:
|
.. path_length | integer | optional | Sets the pathLenConstraint in the ≥ Possible values:
|