| OLD | NEW |
| (Empty) | |
| 1 This is a basic constraints extension, where the critical field (BOOLEAN) is 0. |
| 2 |
| 3 This is not valid because the critical field has a default of FALSE, so under |
| 4 DER-encoding it should be omitted. |
| 5 |
| 6 |
| 7 $ openssl asn1parse -i < [EXTENSION] |
| 8 0:d=0 hl=2 l= 12 cons: SEQUENCE |
| 9 2:d=1 hl=2 l= 3 prim: OBJECT :X509v3 Basic Constraints |
| 10 7:d=1 hl=2 l= 1 prim: BOOLEAN :0 |
| 11 10:d=1 hl=2 l= 2 prim: OCTET STRING [HEX DUMP]:3000 |
| 12 |
| 13 -----BEGIN EXTENSION----- |
| 14 MAwGA1UdEwEBAAQCMAA= |
| 15 -----END EXTENSION----- |
| OLD | NEW |