pub fn is_ca(cert_der: &[u8]) -> Option<bool>Expand description
Check whether the certificate is a CA via the Basic Constraints extension.
Returns None if the extension is absent (cert is NOT a CA per RFC 5280),
Some(true) if cA is TRUE, Some(false) if cA is FALSE.