#gnutls

Name Constraints bypasses hit multiple TLS libraries

CERT/CC notes cover case handling, URI parsing, and wildcard gaps that let constrained certificates evade checks.