[1] [CITE@en[CA:NameConstraints - MozillaWiki]]
([TIME[2018-08-10 21:28:49 +09:00]])
<https://wiki.mozilla.org/CA:NameConstraints>

[2] [CITE@en[crypto/x509: Certificate Name Constraints starting with "." not validated properly · Issue #16347 · golang/go]]
([TIME[2018-08-11 02:34:16 +09:00]])
<https://github.com/golang/go/issues/16347>

[3] [CITE@en[RFC 5280 - Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile]]
([TIME[2018-07-29 16:13:13 +09:00]])
<https://tools.ietf.org/html/rfc5280#section-4.2.1.10>

[4] [CITE[BetterTLS: Name Constraints]]
([TIME[2018-07-30 03:11:12 +09:00]])
<https://nameconstraints.bettertls.com/>

[5] [CITE['''['''cabfpub''']''' Name constrained certificate examples]]
([TIME[2018-09-05 18:00:44 +09:00]])
<https://cabforum.org/pipermail/public/2013-July/001839.html>

[6] [CITE['''['''cabfpub''']''' Name constrained certificate examples]]
([TIME[2018-09-05 18:03:34 +09:00]])
<https://cabforum.org/pipermail/public/2013-July/001837.html>