Question: What is a key requirement for the certificate of a CA signing base station certificates (not directly signed by the vendor root CA) in a telecom network's authentication framework?
Option 1: The issuer name must match the operator's domain.
Option 2: The path length shall be greater than 0 for intermediate CA certificates not directly signing base station certificates.
Option 3: The CRL distribution point extension must always be included in the certificate.
Option 4: The certificate profile requirements do not apply to intermediate vendor CAs.
Explanation: In the context of telecom network security, specifically for base station authentication, allowing a path length greater than 0 for intermediate CA certificates (not directly signing base station certificates) enables flexibility in the certification hierarchy. This is crucial for accommodating complex vendor CA structures while ensuring the certificate chain ultimately leads to a trusted vendor root CA, enhancing overall network domain security.