This is a basic constraints extension, where the critical field (BOOLEAN) is 0. | |
This is not valid because the critical field has a default of FALSE, so under | |
DER-encoding it should be omitted. | |
$ openssl asn1parse -i < [EXTENSION] | |
0:d=0 hl=2 l= 12 cons: SEQUENCE | |
2:d=1 hl=2 l= 3 prim: OBJECT :X509v3 Basic Constraints | |
7:d=1 hl=2 l= 1 prim: BOOLEAN :0 | |
10:d=1 hl=2 l= 2 prim: OCTET STRING [HEX DUMP]:3000 | |
-----BEGIN EXTENSION----- | |
MAwGA1UdEwEBAAQCMAA= | |
-----END EXTENSION----- |