| OLD | NEW |
| 1 This is a basic constraints extension, where the critical field (BOOLEAN) is 0. | 1 This is a basic constraints extension, where the critical field (BOOLEAN) is 0. |
| 2 | 2 |
| 3 This is not valid because the critical field has a default of FALSE, so under | 3 This is not valid because the critical field has a default of FALSE, so under |
| 4 DER-encoding it should be omitted. | 4 DER-encoding it should be omitted. |
| 5 | 5 |
| 6 | 6 |
| 7 $ openssl asn1parse -i < [EXTENSION] | 7 $ openssl asn1parse -i < [EXTENSION] |
| 8 0:d=0 hl=2 l= 12 cons: SEQUENCE | 8 0:d=0 hl=2 l= 12 cons: SEQUENCE |
| 9 2:d=1 hl=2 l= 3 prim: OBJECT :X509v3 Basic Constraints | 9 2:d=1 hl=2 l= 3 prim: OBJECT :X509v3 Basic Constraints |
| 10 7:d=1 hl=2 l= 1 prim: BOOLEAN :0 | 10 7:d=1 hl=2 l= 1 prim: BOOLEAN :0 |
| 11 10:d=1 hl=2 l= 2 prim: OCTET STRING [HEX DUMP]:3000 | 11 10:d=1 hl=2 l= 2 prim: OCTET STRING [HEX DUMP]:3000 |
| 12 | |
| 13 -----BEGIN EXTENSION----- | 12 -----BEGIN EXTENSION----- |
| 14 MAwGA1UdEwEBAAQCMAA= | 13 MAwGA1UdEwEBAAQCMAA= |
| 15 -----END EXTENSION----- | 14 -----END EXTENSION----- |
| OLD | NEW |