[1] CA:NameConstraints - MozillaWiki (2018-08-10 21:28:49 +09:00) https://wiki.mozilla.org/CA:NameConstraints

[2] crypto/x509: Certificate Name Constraints starting with "." not validated properly · Issue #16347 · golang/go (2018-08-11 02:34:16 +09:00) https://github.com/golang/go/issues/16347

[3] RFC 5280 - Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile (2018-07-29 16:13:13 +09:00) https://tools.ietf.org/html/rfc5280#section-4.2.1.10

[4] BetterTLS: Name Constraints (2018-07-30 03:11:12 +09:00) https://nameconstraints.bettertls.com/

[5] [cabfpub] Name constrained certificate examples (2018-09-05 18:00:44 +09:00) https://cabforum.org/pipermail/public/2013-July/001839.html

[6] [cabfpub] Name constrained certificate examples (2018-09-05 18:03:34 +09:00) https://cabforum.org/pipermail/public/2013-July/001837.html