An X.509 extension indicating whether a certificate is a CA certificate and defining path length constraints.