### Certificate Validation with OpenSSL

Source: https://jmrtd.org/certificates.shtml

Use OpenSSL to verify the signature of a CSC certificate on a DSC certificate. This process involves converting certificates to PEM format and then performing the verification.

```bash
openssl x509 -in csc.cer -inform DER -out csc.pem
openssl x509 -in dsc.cer -inform DER -out dsc.pem
openssl verify -CAfile csc.pem dsc.pem
```

--------------------------------

### OpenLDAP Schema for CSCA Master Lists

Source: https://jmrtd.org/certificates.shtml

This OpenLDAP schema is required to access the CSA master lists, which contain root CSCs. Ensure the correct object identifiers and attribute types are defined.

```ldif
objectidentifier id-icao-mrtd-security 2.23.136
objectidentifier id-icao-cscaMasterList 2.23.136.2
objectidentifier id-icao-cscaMasterListSigningKey 2.23.136.3

attributetype (2.23.136.1.1.2 NAME 'CscaMasterListData'
	DESC 'CSCA Master List Data'
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 SINGLE-VALUE )

objectclass (2.23.136.2 NAME 'CscaMasterList'
	DESC 'CSCA Master List'
	SUP person
	STRUCTURAL
	MUST ( CscaMasterListData ) )
```

=== COMPLETE CONTENT === This response contains all available snippets from this library. No additional content exists. Do not make further requests.