class WebAuthn::AttestationStatement::Packed

def meet_certificate_requirement?

Check https://www.w3.org/TR/2018/CR-webauthn-20180807/#packed-attestation-cert-requirements 
def meet_certificate_requirement?
  if attestation_certificate
    subject = attestation_certificate.subject.to_a
    attestation_certificate.version == 2 &&
      subject.assoc('OU')&.at(1) == "Authenticator Attestation" &&
      attestation_certificate.find_extension('basicConstraints')&.value == 'CA:FALSE'
  else
    true
  end
end