Self-Issued certificate requirements?

["Faisal Maqsood" <faisal.maqsood@xxxxxxxxxxxx>]

Hi All,

 

RFC-3280 defines Self Signed certificate as:

"A certificate is self-issued if the DNs that appear in the subject and issuer fields are  identical and are not empty."

 

There might be two condition for self-issued certificate:

1. Version-1 certificate and has not any extension.
2. Version-3 certificate with set of extension/s.

For version-1 it is clear but are there any extra required things for version-3 self-issued certificates?

I mean for self-issued certificate is there any requirement that it Must be a CA certificate?

I mean BasicConstraints = ?, Path Length = ?, KeyUsage = ? etc.

 

Regards,

FAISAL MAQSOOD