-.\" $OpenBSD: X509_check_ca.3,v 1.5 2019/06/06 01:06:59 schwarze Exp $
+.\" $OpenBSD: X509_check_ca.3,v 1.6 2022/02/18 01:41:17 jsg Exp $
.\" OpenSSL 99d63d46 Oct 26 13:56:48 2016 -0400
.\"
.\" This file was written by Victor B. Wagner <vitus@cryptocom.ru>.
.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
.\" OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: June 6 2019 $
+.Dd $Mdocdate: February 18 2022 $
.Dt X509_CHECK_CA 3
.Os
.Sh NAME
.Fa "X509 *cert"
.Fc
.Sh DESCRIPTION
-This function checks whether the given certificate is a CA certificate,
+The
+.Fn X509_check_ca
+function checks whether the given certificate is a CA certificate,
that is, whether it can be used to sign other certificates.
.Sh RETURN VALUES
-This functions returns non-zero if
+If
.Fa cert
-is a CA certificate or 0 otherwise.
+is a CA certificate, a non-zero value is returned; 0 otherwise.
.Pp
The following return values identify specific kinds of CA certificates:
.Bl -tag -width 2n