nc_match
r = nc_match(&gntmp, nc);
r = nc_match(gen, nc);
static int nc_match(GENERAL_NAME *gen, NAME_CONSTRAINTS *nc);