NAME_CONSTRAINTS_check
int rv = NAME_CONSTRAINTS_check(x, nc);
int NAME_CONSTRAINTS_check(X509 *x, NAME_CONSTRAINTS *nc);