Study. uk . com
  1. Home
  2. All questions
  3. Question 250

CISSP study material · question 250 of 500

A version 3 certificate carries no basic constraints extension at all. How must its public key be treated?

  1. It may verify certificate signatures if keyUsage asserts keyCertSign.
  2. It must be rejected outright for all purposes.
  3. It must not be used to verify signatures on other certificates.
  4. It may verify certificate signatures at a path depth of one.
Show the answer

Answer: C. It must not be used to verify signatures on other certificates.

Without the extension, or with its CA boolean left unset, a version 3 certificate's key is barred from checking signatures over other certificates.

Source: RFC 5280 (IETF) — RFC 5280 > 4.2.1.9 Basic Constraints

Challenge yourself on this topic → Study as cards