{"version":"2.1.122","anchor":"certificate-validation-basicconstraints-check","canonical_anchor":"certificate-validation-basicconstraints-check","heading":"Certificate Validation: basicConstraints Check","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.122\/e\/certificate-validation-basicconstraints-check","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.122","markdown":"### Certificate Validation: basicConstraints Check\n\nTLS certificate validation now explicitly checks for the `basicConstraints` extension. Certificates missing this extension are rejected with: \"Certificate is missing basicConstraints extension and cannot be used as a CA.\"\n\n**Evidence**\n\nNew validation check (search for `\"Certificate is missing basicConstraints extension\"`)"}