check_name_constraints
ret = check_name_constraints(context, &nc, c);
if ((ok = check_name_constraints(ctx)) <= 0)
static int check_name_constraints(X509_STORE_CTX *ctx);