A CA cert normally includes the basicConstrants extension. Its keyUsage or extendedKeyUsage also have bits for certificate/CRL signing on.

A root CA has the same issuer and owner.

Hope this helps.

Weijun

camino (sent by Nabble.com) wrote:
i have a x509 certificate
but how can i find out
 it is a root ca certificate or a intermidiate certificate
or just a normal certificate issued to a user?

thanks
--
View this message in context: 
http://www.nabble.com/how-can-i-find-out-a-certificate-%27s-type-t1618690.html#a4386448
Sent from the OpenSSL - Dev forum at Nabble.com.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to