As per the title, is there a way to reliably identify a certificate as an intermediate certificate? I can identify if a certificate is a root certificate. But i can not tell the difference between an intermediate certificate and end/leaf certificate. Is there anything that would? such as one of the extensions?
Add a comment
|
2 Answers
An intermediate differs from a leaf certificate in that it is allowed to sign other certificates, i.e. basic constraints CA:true. It differs from a root certificate in that it is not self-signed, i.e. the issuer is not the certificate itself.
answered Aug 7, 2021 at 10:39
-
thanks, this is exactly what i was thinking/looking into; the extension: Basic Constraints ( 2.5.29.19 ) Aug 7, 2021 at 22:42
Your question sounds like you want to read more about Certificate Path Validation, e.g. in RFC 5280.
-
this would mean i have the complete chain tho. i would like to know without having a complete chain. Aug 7, 2021 at 22:41