[1] CA:NameConstraints - MozillaWiki () <https://wiki.mozilla.org/CA:NameConstraints>
[2] crypto/x509: Certificate Name Constraints starting with "." not validated properly · Issue #16347 · golang/go () <https://github.com/golang/go/issues/16347>
[3] RFC 5280 - Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile () <https://tools.ietf.org/html/rfc5280#section-4.2.1.10>
[4] BetterTLS: Name Constraints () <https://nameconstraints.bettertls.com/>
[5] [cabfpub] Name constrained certificate examples () <https://cabforum.org/pipermail/public/2013-July/001839.html>
[6] [cabfpub] Name constrained certificate examples () <https://cabforum.org/pipermail/public/2013-July/001837.html>