| OLD | NEW | 
|---|
| (Empty) |  | 
|  | 1 This is a basic constraints extension, where the critical field (BOOLEAN) is 0. | 
|  | 2 | 
|  | 3 This is not valid because the critical field has a default of FALSE, so under | 
|  | 4 DER-encoding it should be omitted. | 
|  | 5 | 
|  | 6 | 
|  | 7 $ openssl asn1parse -i < [EXTENSION] | 
|  | 8     0:d=0  hl=2 l=  12 cons: SEQUENCE | 
|  | 9     2:d=1  hl=2 l=   3 prim:  OBJECT            :X509v3 Basic Constraints | 
|  | 10     7:d=1  hl=2 l=   1 prim:  BOOLEAN           :0 | 
|  | 11    10:d=1  hl=2 l=   2 prim:  OCTET STRING      [HEX DUMP]:3000 | 
|  | 12 | 
|  | 13 -----BEGIN EXTENSION----- | 
|  | 14 MAwGA1UdEwEBAAQCMAA= | 
|  | 15 -----END EXTENSION----- | 
| OLD | NEW | 
|---|