From e10eae5b1d6efc82c947f59a53431533e4bd3dc6 Mon Sep 17 00:00:00 2001 From: Thomas Fossati Date: Mon, 16 Dec 2024 16:45:32 +0100 Subject: [PATCH] pathlenconstraints for root CA certs Co-authored-by: Hannes Tschofenig --- draft-ietf-uta-tls13-iot-profile.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/draft-ietf-uta-tls13-iot-profile.md b/draft-ietf-uta-tls13-iot-profile.md index a736e72..55979a5 100644 --- a/draft-ietf-uta-tls13-iot-profile.md +++ b/draft-ietf-uta-tls13-iot-profile.md @@ -595,7 +595,7 @@ Subordinate certification authorities SHOULD NOT have any extendedKeyUsage. ### Basic Constraints The Basic Constraints extension MUST be set, MUST be marked critical, the cA flag -MUST be set to true. +MUST be set to true and the pathLenConstraint SHOULD be omitted. ### CRL Distribution Point