MS Windows expects CA certificates to have a certificate extension called “BasicConstraints”, which shows a certificate as a CA certificate. This certificate extension is not included in some old TeleSec CA certificates. These certificates have been issued by the German Federal Network Agency for Electricity, Gas, Telecommunications, Post and Railway (BNetzA) and are outside of our sphere of influence.