Description: Enable PKI Services to optionally create the path length value in the Basic Constraints extension to restrict a CA from signing another subordinate CA. Also, PKI Services provides an option to specify the binary attribute when posting a certificate or CRL to LDAP to suit the need of different types of LDAP servers.
When change was introduced: z/OS® V2R1
Reference information: z/OS Cryptographic Services PKI Services Guide and Reference