 define the semantics of the extension.</p>

<h2 id="Basic-Constraints">Basic Constraints</h2>

<p>This is a multi-valued extension which indicates whether a certificate is a CA certificate. The first value is <b>CA</b> followed by <b>TRUE</b> or <b>FALSE</b>. If <b>CA</b> is <b>TRUE</b> then an optional <b>pathlen</b> name followed by a nonnegative value can be included.</p>

<p>For example:</p>

<pre><code> basicConstraints = CA:TRUE

 basicConstraints = CA:FALSE

 basicConstraints = critical, CA:TRUE, pa