constraints_validate
if (!constraints_validate(fn, cert))
int constraints_validate(const char *, const struct cert *);
constraints_validate(file, cert);
if (!constraints_validate(file, cert))