Thank you for the info! One question regarding this section: "OpenSSL3 requires that any CA certificate must include the X509v3 Basic Constraints extension with CA: TRUE. Customers should ensure that any certificate used as a CA certificate in Splunk contains this extension." Is there an openssl command you can use to verify whether a CA certificate file has the X509v3 Basic Constraint extension set to CA:TRUE? I've found some sources online about creating files with it but none that explain how to check if an existing file has the value set to TRUE.   Thank you!   ... View more