Mark the certificate as a CA certificate and set the path limit.
the path limit to be set in the BasicConstraints extension.
See Implementation
Mark the certificate as a CA certificate and set the path limit.