From 99c5f1554b1dd1109a220fe56d79f8ad4c74250c Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Sun, 3 May 2015 10:01:04 -0400 Subject: Attempt to make the BasicConstraints.path_length docs more clear --- docs/x509.rst | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'docs') diff --git a/docs/x509.rst b/docs/x509.rst index 5f36a921..a69c4263 100644 --- a/docs/x509.rst +++ b/docs/x509.rst @@ -646,10 +646,10 @@ X.509 Extensions certificate. This attribute only has meaning if ``ca`` is true. If ``ca`` is true then a path length of None means there's no restriction on the number of subordinate CAs in the certificate chain. - If it is zero or greater then that number defines the maximum length. - For example, a ``path_length`` of 1 means the certificate can sign a - subordinate CA, but the subordinate CA is not allowed to create - subordinates with ``ca`` set to true. + If it is zero or greater then it defines the maximum length for a + subordinate CA's certificate chain. For example, a ``path_length`` of 1 + means the certificate can sign a subordinate CA, but the subordinate CA + is not allowed to create subordinates with ``ca`` set to true. .. class:: ExtendedKeyUsage -- cgit v1.2.3