Basic constraints. Long-time PKI-botherer.
If you want to email me, use: nick (-at-) nickf (-dot-) net