diff --git a/draft-ietf-uta-tls13-iot-profile.md b/draft-ietf-uta-tls13-iot-profile.md index a736e72..55979a5 100644 --- a/draft-ietf-uta-tls13-iot-profile.md +++ b/draft-ietf-uta-tls13-iot-profile.md @@ -595,7 +595,7 @@ Subordinate certification authorities SHOULD NOT have any extendedKeyUsage. ### Basic Constraints The Basic Constraints extension MUST be set, MUST be marked critical, the cA flag -MUST be set to true. +MUST be set to true and the pathLenConstraint SHOULD be omitted. ### CRL Distribution Point