If someone gives my program just one X.509 v1 or v2
certificate, how do I check if it is a CA certificate?

These are the things I do to check if it is a root CA
certificate:
a. Check if the subject and issuer names match.
b. Check if the certificate is self-signed.

But if the certificate is a sub CA certificate, then is
there a way to find out? Are X.509 v1 or v2 sub CA
certificates common?
Thanks for any ideas.
-Fiel

__________________________________
Do you Yahoo!?
Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
http://calendar.yahoo.com
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to