NAME_CONSTRAINTS_check_CN
rv = NAME_CONSTRAINTS_check_CN(x, nc);
int NAME_CONSTRAINTS_check_CN(X509 *x, NAME_CONSTRAINTS *nc);