Mozilla will not honor a cert as an intermediate CA ca cert unless it has
the basicConstraints extension.  However, root certs are not required to 
have it, and many do not.  (In fact, many root CA certs are X509v1, which
has not extensions at all.)

--
Nelson Bolyard               
Disclaimer:                  I speak for myself, not for Netscape

Reply via email to