2.5.29.19 - Basic Constraints

OID value: 2.5.29.19

OID description:
id-ce-basicConstraints

This extension indicates if the subject may act as a CA, with the certified public key being used to verify certificate signatures. If so, a certification path length constraint may also be specified.

This extension may, at the option of the certificate issuer, be either critical or non-critical.

basicConstraints EXTENSION ::= {
	SYNTAX BasicConstraintsSyntax
	IDENTIFIED BY id-ce-basicConstraints
}

BasicConstraintsSyntax ::= SEQUENCE {
	cA	BOOLEAN DEFAULT FALSE,
	pathLenConstraint INTEGER (0..MAX) OPTIONAL
}

Superior references

• 2.5.29 - certificateExtension (id-ce)
• 2.5 - X.500 Directory Services
• 2 - ISO/ITU-T jointly assigned OIDs
• Top of OID tree