public Optional<Boolean> getBasicConstraints() {
        return getExtensions()
                .map(BasicConstraints::fromExtensions)
                .map(BasicConstraints::isCA);
    }
@return If basic constraints extension is present: returns true if CA cert, false otherwise. Returns empty if the extension is not present.
security-utils/src/main/java/com/yahoo/security/Pkcs10Csr.java