private function _validateIssuerProfile(Certificate $cert)
    {
        $exts = $cert->tbsCertificate()->extensions();
        if ($exts->hasKeyUsage() && !$exts->keyUsage()->isDigitalSignature()) {
            throw new ACValidationException(
                "Issuer PKC's Key Usage extension doesn't permit" .
                     " verification of digital signatures.");
        }
        if ($exts->hasBasicConstraints() && $exts->basicConstraints()->isCA()) {
            throw new ACValidationException("Issuer PKC must not be a CA.");
        }
    }
private function _validateIssuerProfile(Certificate $cert)
    {
        $exts = $cert->tbsCertificate()->extensions();
        if ($exts->hasKeyUsage() && !$exts->keyUsage()->isDigitalSignature()) {
            throw new ACValidationException(
                "Issuer PKC's Key Usage extension doesn't permit" .
                     " verification of digital signatures.");
        }
        if ($exts->hasBasicConstraints() && $exts->basicConstraints()->isCA()) {
            throw new ACValidationException("Issuer PKC must not be a CA.");
        }
    }
private function _validateIssuerProfile ( Certificate $ cert ) { $ exts = $ cert -> tbsCertificate ( ) -> extensions ( ) ; if ( $ exts -> hasKeyUsage ( ) && ! $ exts -> keyUsage ( ) -> isDigitalSignature ( ) ) { throw new ACValidationException ( "Issuer PKC's Key Usage extension doesn't permit" . " verification of digital signatures." ) ; } if ( $ exts -> hasBasicConstraints ( ) && $ exts -> basicConstraints ( ) -> isCA ( ) ) { throw new ACValidationException ( "Issuer PKC must not be a CA." ) ; } }
Validate AC issuer's profile.

@link https://tools.ietf.org/html/rfc5755#section-4.5
@param Certificate $cert
@throws ACValidationException
Validate AC issuer s profile .