bettertls

bettertls::nameconstraints::tc0

Testcase 0 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc1

Testcase 1 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2

Testcase 2 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc3

Testcase 3 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc4

Testcase 4 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5

Testcase 5 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6

Testcase 6 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7

Testcase 7 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc8

Testcase 8 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9

Testcase 9 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc10

Testcase 10 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc11

Testcase 11 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc12

Testcase 12 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc13

Testcase 13 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc14

Testcase 14 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc15

Testcase 15 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc16

Testcase 16 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc17

Testcase 17 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc18

Testcase 18 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc19

Testcase 19 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc20

Testcase 20 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc21

Testcase 21 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc22

Testcase 22 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc23

Testcase 23 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc24

Testcase 24 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc25

Testcase 25 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc26

Testcase 26 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc27

Testcase 27 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc28

Testcase 28 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc29

Testcase 29 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc30

Testcase 30 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc31

Testcase 31 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc32

Testcase 32 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc33

Testcase 33 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc34

Testcase 34 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc35

Testcase 35 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc36

Testcase 36 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc37

Testcase 37 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc38

Testcase 38 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc39

Testcase 39 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc40

Testcase 40 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc41

Testcase 41 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc42

Testcase 42 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc43

Testcase 43 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc44

Testcase 44 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc45

Testcase 45 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc46

Testcase 46 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc47

Testcase 47 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc48

Testcase 48 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc49

Testcase 49 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc50

Testcase 50 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc51

Testcase 51 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc52

Testcase 52 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc53

Testcase 53 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc54

Testcase 54 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc55

Testcase 55 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc56

Testcase 56 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc57

Testcase 57 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc58

Testcase 58 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc59

Testcase 59 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc60

Testcase 60 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc61

Testcase 61 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc62

Testcase 62 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc63

Testcase 63 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc64

Testcase 64 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc65

Testcase 65 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc66

Testcase 66 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc67

Testcase 67 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc68

Testcase 68 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc69

Testcase 69 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc70

Testcase 70 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc71

Testcase 71 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc72

Testcase 72 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc73

Testcase 73 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc74

Testcase 74 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc75

Testcase 75 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc76

Testcase 76 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc77

Testcase 77 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc78

Testcase 78 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc79

Testcase 79 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc80

Testcase 80 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc81

Testcase 81 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc82

Testcase 82 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc83

Testcase 83 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc84

Testcase 84 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc85

Testcase 85 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc86

Testcase 86 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc87

Testcase 87 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc88

Testcase 88 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc89

Testcase 89 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc90

Testcase 90 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc91

Testcase 91 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc92

Testcase 92 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc93

Testcase 93 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc94

Testcase 94 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc95

Testcase 95 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc96

Testcase 96 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc97

Testcase 97 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc98

Testcase 98 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc99

Testcase 99 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc100

Testcase 100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc101

Testcase 101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc102

Testcase 102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc103

Testcase 103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc104

Testcase 104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc105

Testcase 105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc106

Testcase 106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc107

Testcase 107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc108

Testcase 108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc109

Testcase 109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc110

Testcase 110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc111

Testcase 111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc112

Testcase 112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc113

Testcase 113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc114

Testcase 114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc115

Testcase 115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc116

Testcase 116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc117

Testcase 117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc118

Testcase 118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc119

Testcase 119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc120

Testcase 120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc121

Testcase 121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc122

Testcase 122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc123

Testcase 123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc124

Testcase 124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc125

Testcase 125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc126

Testcase 126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc127

Testcase 127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc128

Testcase 128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc129

Testcase 129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc130

Testcase 130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc131

Testcase 131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc132

Testcase 132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc133

Testcase 133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc134

Testcase 134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc135

Testcase 135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc136

Testcase 136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc137

Testcase 137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc138

Testcase 138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc139

Testcase 139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc140

Testcase 140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc141

Testcase 141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc142

Testcase 142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc143

Testcase 143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc144

Testcase 144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc145

Testcase 145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc146

Testcase 146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc147

Testcase 147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc148

Testcase 148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc149

Testcase 149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc150

Testcase 150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc151

Testcase 151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc152

Testcase 152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc153

Testcase 153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc154

Testcase 154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc155

Testcase 155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc156

Testcase 156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc157

Testcase 157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc158

Testcase 158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc159

Testcase 159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc160

Testcase 160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc161

Testcase 161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc162

Testcase 162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc163

Testcase 163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc164

Testcase 164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc165

Testcase 165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc166

Testcase 166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc167

Testcase 167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc168

Testcase 168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc169

Testcase 169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc170

Testcase 170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc171

Testcase 171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc172

Testcase 172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc173

Testcase 173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc174

Testcase 174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc175

Testcase 175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc176

Testcase 176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc177

Testcase 177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc178

Testcase 178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc179

Testcase 179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc180

Testcase 180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc181

Testcase 181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc182

Testcase 182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc183

Testcase 183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc184

Testcase 184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc185

Testcase 185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc186

Testcase 186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc187

Testcase 187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc188

Testcase 188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc189

Testcase 189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc190

Testcase 190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc191

Testcase 191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc192

Testcase 192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc193

Testcase 193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc194

Testcase 194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc195

Testcase 195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc196

Testcase 196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc197

Testcase 197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc198

Testcase 198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc199

Testcase 199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc200

Testcase 200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc201

Testcase 201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc202

Testcase 202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc203

Testcase 203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc204

Testcase 204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc205

Testcase 205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc206

Testcase 206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc207

Testcase 207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc208

Testcase 208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc209

Testcase 209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc210

Testcase 210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc211

Testcase 211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc212

Testcase 212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc213

Testcase 213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc214

Testcase 214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc215

Testcase 215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc216

Testcase 216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc217

Testcase 217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc218

Testcase 218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc219

Testcase 219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc220

Testcase 220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc221

Testcase 221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc222

Testcase 222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc223

Testcase 223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc224

Testcase 224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc225

Testcase 225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc226

Testcase 226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc227

Testcase 227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc228

Testcase 228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc229

Testcase 229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc230

Testcase 230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc231

Testcase 231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc232

Testcase 232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc233

Testcase 233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc234

Testcase 234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc235

Testcase 235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc236

Testcase 236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc237

Testcase 237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc238

Testcase 238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc239

Testcase 239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc240

Testcase 240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc241

Testcase 241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc242

Testcase 242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc243

Testcase 243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc244

Testcase 244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc245

Testcase 245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc246

Testcase 246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc247

Testcase 247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc248

Testcase 248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc249

Testcase 249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc250

Testcase 250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc251

Testcase 251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc252

Testcase 252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc253

Testcase 253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc254

Testcase 254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc255

Testcase 255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc256

Testcase 256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc257

Testcase 257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc258

Testcase 258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc259

Testcase 259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc260

Testcase 260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc261

Testcase 261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc262

Testcase 262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc263

Testcase 263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc264

Testcase 264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc265

Testcase 265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc266

Testcase 266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc267

Testcase 267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc268

Testcase 268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc269

Testcase 269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc270

Testcase 270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc271

Testcase 271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc272

Testcase 272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc273

Testcase 273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc274

Testcase 274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc275

Testcase 275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc276

Testcase 276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc277

Testcase 277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc278

Testcase 278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc279

Testcase 279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc280

Testcase 280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc281

Testcase 281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc282

Testcase 282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc283

Testcase 283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc284

Testcase 284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc285

Testcase 285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc286

Testcase 286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc287

Testcase 287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc288

Testcase 288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc289

Testcase 289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc290

Testcase 290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc291

Testcase 291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc292

Testcase 292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc293

Testcase 293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc294

Testcase 294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc295

Testcase 295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc296

Testcase 296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc297

Testcase 297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc298

Testcase 298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc299

Testcase 299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc300

Testcase 300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc301

Testcase 301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc302

Testcase 302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc303

Testcase 303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc304

Testcase 304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc305

Testcase 305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc306

Testcase 306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc307

Testcase 307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc308

Testcase 308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc309

Testcase 309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc310

Testcase 310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc311

Testcase 311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc312

Testcase 312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc313

Testcase 313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc314

Testcase 314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc315

Testcase 315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc316

Testcase 316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc317

Testcase 317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc318

Testcase 318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc319

Testcase 319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc320

Testcase 320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc321

Testcase 321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc322

Testcase 322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc323

Testcase 323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc324

Testcase 324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc325

Testcase 325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc326

Testcase 326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc327

Testcase 327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc328

Testcase 328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc329

Testcase 329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc330

Testcase 330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc331

Testcase 331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc332

Testcase 332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc333

Testcase 333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc334

Testcase 334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc335

Testcase 335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc336

Testcase 336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc337

Testcase 337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc338

Testcase 338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc339

Testcase 339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc340

Testcase 340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc341

Testcase 341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc342

Testcase 342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc343

Testcase 343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc344

Testcase 344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc345

Testcase 345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc346

Testcase 346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc347

Testcase 347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc348

Testcase 348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc349

Testcase 349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc350

Testcase 350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc351

Testcase 351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc352

Testcase 352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc353

Testcase 353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc354

Testcase 354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc355

Testcase 355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc356

Testcase 356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc357

Testcase 357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc358

Testcase 358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc359

Testcase 359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc360

Testcase 360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc361

Testcase 361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc362

Testcase 362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc363

Testcase 363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc364

Testcase 364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc365

Testcase 365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc366

Testcase 366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc367

Testcase 367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc368

Testcase 368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc369

Testcase 369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc370

Testcase 370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc371

Testcase 371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc372

Testcase 372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc373

Testcase 373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc374

Testcase 374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc375

Testcase 375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc376

Testcase 376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc377

Testcase 377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc378

Testcase 378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc379

Testcase 379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc380

Testcase 380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc381

Testcase 381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc382

Testcase 382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc383

Testcase 383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc384

Testcase 384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc385

Testcase 385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc386

Testcase 386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc387

Testcase 387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc388

Testcase 388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc389

Testcase 389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc390

Testcase 390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc391

Testcase 391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc392

Testcase 392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc393

Testcase 393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc394

Testcase 394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc395

Testcase 395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc396

Testcase 396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc397

Testcase 397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc398

Testcase 398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc399

Testcase 399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc400

Testcase 400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc401

Testcase 401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc402

Testcase 402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc403

Testcase 403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc404

Testcase 404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc405

Testcase 405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc406

Testcase 406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc407

Testcase 407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc408

Testcase 408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc409

Testcase 409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc410

Testcase 410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc411

Testcase 411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc412

Testcase 412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc413

Testcase 413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc414

Testcase 414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc415

Testcase 415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc416

Testcase 416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc417

Testcase 417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc418

Testcase 418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc419

Testcase 419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc420

Testcase 420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc421

Testcase 421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc422

Testcase 422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc423

Testcase 423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc424

Testcase 424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc425

Testcase 425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc426

Testcase 426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc427

Testcase 427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc428

Testcase 428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc429

Testcase 429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc430

Testcase 430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc431

Testcase 431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc432

Testcase 432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc433

Testcase 433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc434

Testcase 434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc435

Testcase 435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc436

Testcase 436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc437

Testcase 437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc438

Testcase 438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc439

Testcase 439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc440

Testcase 440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc441

Testcase 441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc442

Testcase 442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc443

Testcase 443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc444

Testcase 444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc445

Testcase 445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc446

Testcase 446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc447

Testcase 447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc448

Testcase 448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc449

Testcase 449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc450

Testcase 450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc451

Testcase 451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc452

Testcase 452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc453

Testcase 453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc454

Testcase 454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc455

Testcase 455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc456

Testcase 456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc457

Testcase 457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc458

Testcase 458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc459

Testcase 459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc460

Testcase 460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc461

Testcase 461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc462

Testcase 462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc463

Testcase 463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc464

Testcase 464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc465

Testcase 465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc466

Testcase 466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc467

Testcase 467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc468

Testcase 468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc469

Testcase 469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc470

Testcase 470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc471

Testcase 471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc472

Testcase 472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc473

Testcase 473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc474

Testcase 474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc475

Testcase 475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc476

Testcase 476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc477

Testcase 477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc478

Testcase 478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc479

Testcase 479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc480

Testcase 480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc481

Testcase 481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc482

Testcase 482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc483

Testcase 483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc484

Testcase 484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc485

Testcase 485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc486

Testcase 486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc487

Testcase 487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc488

Testcase 488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc489

Testcase 489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc490

Testcase 490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc491

Testcase 491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc492

Testcase 492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc493

Testcase 493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc494

Testcase 494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc495

Testcase 495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc496

Testcase 496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc497

Testcase 497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc498

Testcase 498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc499

Testcase 499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc500

Testcase 500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc501

Testcase 501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc502

Testcase 502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc503

Testcase 503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc504

Testcase 504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc505

Testcase 505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc506

Testcase 506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc507

Testcase 507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc508

Testcase 508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc509

Testcase 509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc510

Testcase 510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc511

Testcase 511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc512

Testcase 512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc513

Testcase 513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc514

Testcase 514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc515

Testcase 515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc516

Testcase 516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc517

Testcase 517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc518

Testcase 518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc519

Testcase 519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc520

Testcase 520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc521

Testcase 521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc522

Testcase 522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc523

Testcase 523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc524

Testcase 524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc525

Testcase 525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc526

Testcase 526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc527

Testcase 527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc528

Testcase 528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc529

Testcase 529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc530

Testcase 530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc531

Testcase 531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc532

Testcase 532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc533

Testcase 533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc534

Testcase 534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc535

Testcase 535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc536

Testcase 536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc537

Testcase 537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc538

Testcase 538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc539

Testcase 539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc540

Testcase 540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc541

Testcase 541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc542

Testcase 542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc543

Testcase 543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc544

Testcase 544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc545

Testcase 545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc546

Testcase 546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc547

Testcase 547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc548

Testcase 548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc549

Testcase 549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc550

Testcase 550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc551

Testcase 551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc552

Testcase 552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc553

Testcase 553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc554

Testcase 554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc555

Testcase 555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc556

Testcase 556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc557

Testcase 557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc558

Testcase 558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc559

Testcase 559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc560

Testcase 560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc561

Testcase 561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc562

Testcase 562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc563

Testcase 563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc564

Testcase 564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc565

Testcase 565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc566

Testcase 566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc567

Testcase 567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc568

Testcase 568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc569

Testcase 569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc570

Testcase 570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc571

Testcase 571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc572

Testcase 572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc573

Testcase 573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc574

Testcase 574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc575

Testcase 575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc576

Testcase 576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc577

Testcase 577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc578

Testcase 578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc579

Testcase 579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc580

Testcase 580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc581

Testcase 581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc582

Testcase 582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc583

Testcase 583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc584

Testcase 584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc585

Testcase 585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc586

Testcase 586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc587

Testcase 587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc588

Testcase 588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc589

Testcase 589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc590

Testcase 590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc591

Testcase 591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc592

Testcase 592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc593

Testcase 593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc594

Testcase 594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc595

Testcase 595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc596

Testcase 596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc597

Testcase 597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc598

Testcase 598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc599

Testcase 599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc600

Testcase 600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc601

Testcase 601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc602

Testcase 602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc603

Testcase 603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc604

Testcase 604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc605

Testcase 605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc606

Testcase 606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc607

Testcase 607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc608

Testcase 608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc609

Testcase 609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc610

Testcase 610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc611

Testcase 611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc612

Testcase 612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc613

Testcase 613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc614

Testcase 614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc615

Testcase 615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc616

Testcase 616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc617

Testcase 617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc618

Testcase 618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc619

Testcase 619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc620

Testcase 620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc621

Testcase 621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc622

Testcase 622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc623

Testcase 623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc624

Testcase 624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc625

Testcase 625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc626

Testcase 626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc627

Testcase 627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc628

Testcase 628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc629

Testcase 629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc630

Testcase 630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc631

Testcase 631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc632

Testcase 632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc633

Testcase 633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc634

Testcase 634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc635

Testcase 635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc636

Testcase 636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc637

Testcase 637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc638

Testcase 638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc639

Testcase 639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc640

Testcase 640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc641

Testcase 641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc642

Testcase 642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc643

Testcase 643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc644

Testcase 644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc645

Testcase 645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc646

Testcase 646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc647

Testcase 647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc648

Testcase 648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc649

Testcase 649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc650

Testcase 650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc651

Testcase 651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc652

Testcase 652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc653

Testcase 653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc654

Testcase 654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc655

Testcase 655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc656

Testcase 656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc657

Testcase 657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc658

Testcase 658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc659

Testcase 659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc660

Testcase 660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc661

Testcase 661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc662

Testcase 662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc663

Testcase 663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc664

Testcase 664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc665

Testcase 665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc666

Testcase 666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc667

Testcase 667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc668

Testcase 668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc669

Testcase 669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc670

Testcase 670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc671

Testcase 671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc672

Testcase 672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc673

Testcase 673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc674

Testcase 674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc675

Testcase 675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc676

Testcase 676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc677

Testcase 677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc678

Testcase 678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc679

Testcase 679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc680

Testcase 680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc681

Testcase 681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc682

Testcase 682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc683

Testcase 683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc684

Testcase 684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc685

Testcase 685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc686

Testcase 686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc687

Testcase 687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc688

Testcase 688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc689

Testcase 689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc690

Testcase 690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc691

Testcase 691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc692

Testcase 692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc693

Testcase 693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc694

Testcase 694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc695

Testcase 695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc696

Testcase 696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc697

Testcase 697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc698

Testcase 698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc699

Testcase 699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc700

Testcase 700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc701

Testcase 701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc702

Testcase 702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc703

Testcase 703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc704

Testcase 704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc705

Testcase 705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc706

Testcase 706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc707

Testcase 707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc708

Testcase 708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc709

Testcase 709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc710

Testcase 710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc711

Testcase 711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc712

Testcase 712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc713

Testcase 713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc714

Testcase 714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc715

Testcase 715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc716

Testcase 716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc717

Testcase 717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc718

Testcase 718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc719

Testcase 719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc720

Testcase 720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc721

Testcase 721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc722

Testcase 722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc723

Testcase 723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc724

Testcase 724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc725

Testcase 725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc726

Testcase 726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc727

Testcase 727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc728

Testcase 728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc729

Testcase 729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc730

Testcase 730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc731

Testcase 731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc732

Testcase 732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc733

Testcase 733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc734

Testcase 734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc735

Testcase 735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc736

Testcase 736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	❌ (unexpected success)	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc737

Testcase 737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc738

Testcase 738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc739

Testcase 739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc740

Testcase 740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc741

Testcase 741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc742

Testcase 742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc743

Testcase 743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc744

Testcase 744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc745

Testcase 745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc746

Testcase 746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc747

Testcase 747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc748

Testcase 748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc749

Testcase 749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc750

Testcase 750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc751

Testcase 751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc752

Testcase 752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc753

Testcase 753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc754

Testcase 754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc755

Testcase 755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc756

Testcase 756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc757

Testcase 757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc758

Testcase 758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc759

Testcase 759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc760

Testcase 760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc761

Testcase 761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc762

Testcase 762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc763

Testcase 763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc764

Testcase 764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc765

Testcase 765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc766

Testcase 766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc767

Testcase 767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc768

Testcase 768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc769

Testcase 769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc770

Testcase 770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc771

Testcase 771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc772

Testcase 772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc773

Testcase 773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc774

Testcase 774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc775

Testcase 775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc776

Testcase 776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc777

Testcase 777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc778

Testcase 778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc779

Testcase 779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc780

Testcase 780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc781

Testcase 781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc782

Testcase 782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc783

Testcase 783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc784

Testcase 784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc785

Testcase 785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc786

Testcase 786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc787

Testcase 787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc788

Testcase 788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc789

Testcase 789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc790

Testcase 790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc791

Testcase 791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc792

Testcase 792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc793

Testcase 793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc794

Testcase 794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc795

Testcase 795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc796

Testcase 796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc797

Testcase 797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc798

Testcase 798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc799

Testcase 799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc800

Testcase 800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc801

Testcase 801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc802

Testcase 802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc803

Testcase 803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc804

Testcase 804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc805

Testcase 805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc806

Testcase 806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc807

Testcase 807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc808

Testcase 808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc809

Testcase 809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc810

Testcase 810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc811

Testcase 811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc812

Testcase 812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc813

Testcase 813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc814

Testcase 814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc815

Testcase 815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc816

Testcase 816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc817

Testcase 817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc818

Testcase 818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc819

Testcase 819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc820

Testcase 820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc821

Testcase 821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc822

Testcase 822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc823

Testcase 823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc824

Testcase 824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc825

Testcase 825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc826

Testcase 826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc827

Testcase 827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc828

Testcase 828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc829

Testcase 829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc830

Testcase 830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc831

Testcase 831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc832

Testcase 832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc833

Testcase 833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc834

Testcase 834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc835

Testcase 835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc836

Testcase 836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc837

Testcase 837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc838

Testcase 838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc839

Testcase 839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc840

Testcase 840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc841

Testcase 841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc842

Testcase 842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc843

Testcase 843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc844

Testcase 844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc845

Testcase 845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc846

Testcase 846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc847

Testcase 847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc848

Testcase 848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc849

Testcase 849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc850

Testcase 850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc851

Testcase 851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc852

Testcase 852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc853

Testcase 853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc854

Testcase 854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc855

Testcase 855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc856

Testcase 856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc857

Testcase 857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc858

Testcase 858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc859

Testcase 859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc860

Testcase 860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc861

Testcase 861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc862

Testcase 862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc863

Testcase 863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc864

Testcase 864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc865

Testcase 865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc866

Testcase 866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc867

Testcase 867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc868

Testcase 868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc869

Testcase 869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc870

Testcase 870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc871

Testcase 871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc872

Testcase 872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc873

Testcase 873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc874

Testcase 874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc875

Testcase 875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc876

Testcase 876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc877

Testcase 877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc878

Testcase 878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc879

Testcase 879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc880

Testcase 880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc881

Testcase 881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc882

Testcase 882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc883

Testcase 883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc884

Testcase 884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc885

Testcase 885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc886

Testcase 886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc887

Testcase 887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc888

Testcase 888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc889

Testcase 889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc890

Testcase 890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc891

Testcase 891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc892

Testcase 892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc893

Testcase 893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc894

Testcase 894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc895

Testcase 895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc896

Testcase 896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc897

Testcase 897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc898

Testcase 898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc899

Testcase 899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc900

Testcase 900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc901

Testcase 901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc902

Testcase 902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc903

Testcase 903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc904

Testcase 904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc905

Testcase 905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc906

Testcase 906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc907

Testcase 907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc908

Testcase 908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc909

Testcase 909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc910

Testcase 910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc911

Testcase 911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc912

Testcase 912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc913

Testcase 913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc914

Testcase 914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc915

Testcase 915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc916

Testcase 916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc917

Testcase 917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc918

Testcase 918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc919

Testcase 919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc920

Testcase 920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc921

Testcase 921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc922

Testcase 922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc923

Testcase 923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc924

Testcase 924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc925

Testcase 925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc926

Testcase 926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc927

Testcase 927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc928

Testcase 928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc929

Testcase 929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc930

Testcase 930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc931

Testcase 931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc932

Testcase 932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc933

Testcase 933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc934

Testcase 934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc935

Testcase 935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc936

Testcase 936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc937

Testcase 937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc938

Testcase 938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc939

Testcase 939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc940

Testcase 940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc941

Testcase 941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc942

Testcase 942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc943

Testcase 943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc944

Testcase 944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc945

Testcase 945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc946

Testcase 946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc947

Testcase 947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc948

Testcase 948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc949

Testcase 949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc950

Testcase 950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc951

Testcase 951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc952

Testcase 952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc953

Testcase 953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc954

Testcase 954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc955

Testcase 955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc956

Testcase 956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc957

Testcase 957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc958

Testcase 958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc959

Testcase 959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc960

Testcase 960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc961

Testcase 961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc962

Testcase 962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc963

Testcase 963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc964

Testcase 964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc965

Testcase 965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc966

Testcase 966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc967

Testcase 967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc968

Testcase 968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc969

Testcase 969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc970

Testcase 970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc971

Testcase 971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc972

Testcase 972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc973

Testcase 973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc974

Testcase 974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc975

Testcase 975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc976

Testcase 976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc977

Testcase 977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc978

Testcase 978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc979

Testcase 979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc980

Testcase 980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc981

Testcase 981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc982

Testcase 982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc983

Testcase 983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc984

Testcase 984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc985

Testcase 985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc986

Testcase 986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc987

Testcase 987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc988

Testcase 988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc989

Testcase 989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc990

Testcase 990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc991

Testcase 991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc992

Testcase 992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc993

Testcase 993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc994

Testcase 994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc995

Testcase 995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc996

Testcase 996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc997

Testcase 997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc998

Testcase 998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc999

Testcase 999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1000

Testcase 1000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1001

Testcase 1001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1002

Testcase 1002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1003

Testcase 1003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1004

Testcase 1004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1005

Testcase 1005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1006

Testcase 1006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1007

Testcase 1007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1008

Testcase 1008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1009

Testcase 1009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1010

Testcase 1010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1011

Testcase 1011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1012

Testcase 1012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1013

Testcase 1013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1014

Testcase 1014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1015

Testcase 1015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1016

Testcase 1016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1017

Testcase 1017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1018

Testcase 1018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1019

Testcase 1019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1020

Testcase 1020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1021

Testcase 1021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1022

Testcase 1022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1023

Testcase 1023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1024

Testcase 1024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1025

Testcase 1025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1026

Testcase 1026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1027

Testcase 1027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1028

Testcase 1028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1029

Testcase 1029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1030

Testcase 1030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1031

Testcase 1031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1032

Testcase 1032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1033

Testcase 1033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1034

Testcase 1034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1035

Testcase 1035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1036

Testcase 1036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1037

Testcase 1037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1038

Testcase 1038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1039

Testcase 1039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1040

Testcase 1040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1041

Testcase 1041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1042

Testcase 1042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1043

Testcase 1043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1044

Testcase 1044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1045

Testcase 1045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1046

Testcase 1046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1047

Testcase 1047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1048

Testcase 1048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1049

Testcase 1049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1050

Testcase 1050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1051

Testcase 1051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1052

Testcase 1052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1053

Testcase 1053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1054

Testcase 1054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1055

Testcase 1055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1056

Testcase 1056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1057

Testcase 1057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1058

Testcase 1058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1059

Testcase 1059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1060

Testcase 1060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc1061

Testcase 1061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1062

Testcase 1062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1063

Testcase 1063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1064

Testcase 1064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1065

Testcase 1065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1066

Testcase 1066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1067

Testcase 1067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1068

Testcase 1068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1069

Testcase 1069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1070

Testcase 1070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1071

Testcase 1071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1072

Testcase 1072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1073

Testcase 1073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1074

Testcase 1074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1075

Testcase 1075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1076

Testcase 1076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1077

Testcase 1077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1078

Testcase 1078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1079

Testcase 1079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1080

Testcase 1080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1081

Testcase 1081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1082

Testcase 1082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1083

Testcase 1083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1084

Testcase 1084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1085

Testcase 1085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1086

Testcase 1086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1087

Testcase 1087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1088

Testcase 1088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1089

Testcase 1089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1090

Testcase 1090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1091

Testcase 1091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1092

Testcase 1092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1093

Testcase 1093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1094

Testcase 1094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1095

Testcase 1095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1096

Testcase 1096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1097

Testcase 1097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1098

Testcase 1098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1099

Testcase 1099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1100

Testcase 1100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1101

Testcase 1101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1102

Testcase 1102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1103

Testcase 1103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1104

Testcase 1104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1105

Testcase 1105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1106

Testcase 1106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1107

Testcase 1107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1108

Testcase 1108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1109

Testcase 1109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1110

Testcase 1110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1111

Testcase 1111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1112

Testcase 1112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1113

Testcase 1113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1114

Testcase 1114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1115

Testcase 1115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1116

Testcase 1116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1117

Testcase 1117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1118

Testcase 1118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1119

Testcase 1119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1120

Testcase 1120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1121

Testcase 1121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1122

Testcase 1122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1123

Testcase 1123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1124

Testcase 1124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1125

Testcase 1125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1126

Testcase 1126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1127

Testcase 1127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1128

Testcase 1128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1129

Testcase 1129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1130

Testcase 1130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1131

Testcase 1131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1132

Testcase 1132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1133

Testcase 1133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1134

Testcase 1134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1135

Testcase 1135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1136

Testcase 1136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1137

Testcase 1137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1138

Testcase 1138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1139

Testcase 1139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1140

Testcase 1140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1141

Testcase 1141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc1142

Testcase 1142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1143

Testcase 1143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1144

Testcase 1144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1145

Testcase 1145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1146

Testcase 1146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1147

Testcase 1147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1148

Testcase 1148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1149

Testcase 1149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1150

Testcase 1150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1151

Testcase 1151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1152

Testcase 1152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1153

Testcase 1153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1154

Testcase 1154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1155

Testcase 1155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1156

Testcase 1156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1157

Testcase 1157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1158

Testcase 1158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1159

Testcase 1159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1160

Testcase 1160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1161

Testcase 1161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1162

Testcase 1162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1163

Testcase 1163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1164

Testcase 1164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1165

Testcase 1165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1166

Testcase 1166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1167

Testcase 1167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1168

Testcase 1168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1169

Testcase 1169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1170

Testcase 1170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1171

Testcase 1171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1172

Testcase 1172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1173

Testcase 1173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1174

Testcase 1174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1175

Testcase 1175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1176

Testcase 1176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1177

Testcase 1177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1178

Testcase 1178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1179

Testcase 1179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1180

Testcase 1180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1181

Testcase 1181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1182

Testcase 1182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1183

Testcase 1183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1184

Testcase 1184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1185

Testcase 1185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1186

Testcase 1186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1187

Testcase 1187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1188

Testcase 1188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1189

Testcase 1189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1190

Testcase 1190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1191

Testcase 1191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1192

Testcase 1192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1193

Testcase 1193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1194

Testcase 1194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1195

Testcase 1195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1196

Testcase 1196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1197

Testcase 1197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1198

Testcase 1198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1199

Testcase 1199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1200

Testcase 1200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1201

Testcase 1201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1202

Testcase 1202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1203

Testcase 1203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1204

Testcase 1204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1205

Testcase 1205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1206

Testcase 1206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1207

Testcase 1207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1208

Testcase 1208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1209

Testcase 1209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1210

Testcase 1210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1211

Testcase 1211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1212

Testcase 1212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1213

Testcase 1213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1214

Testcase 1214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1215

Testcase 1215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1216

Testcase 1216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1217

Testcase 1217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1218

Testcase 1218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1219

Testcase 1219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1220

Testcase 1220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1221

Testcase 1221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1222

Testcase 1222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc1223

Testcase 1223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1224

Testcase 1224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1225

Testcase 1225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1226

Testcase 1226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1227

Testcase 1227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1228

Testcase 1228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1229

Testcase 1229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1230

Testcase 1230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1231

Testcase 1231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1232

Testcase 1232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1233

Testcase 1233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1234

Testcase 1234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1235

Testcase 1235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1236

Testcase 1236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1237

Testcase 1237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1238

Testcase 1238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1239

Testcase 1239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1240

Testcase 1240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1241

Testcase 1241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1242

Testcase 1242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1243

Testcase 1243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1244

Testcase 1244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1245

Testcase 1245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1246

Testcase 1246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1247

Testcase 1247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1248

Testcase 1248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1249

Testcase 1249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1250

Testcase 1250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1251

Testcase 1251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1252

Testcase 1252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1253

Testcase 1253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1254

Testcase 1254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1255

Testcase 1255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1256

Testcase 1256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1257

Testcase 1257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1258

Testcase 1258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1259

Testcase 1259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1260

Testcase 1260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1261

Testcase 1261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1262

Testcase 1262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1263

Testcase 1263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1264

Testcase 1264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1265

Testcase 1265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1266

Testcase 1266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1267

Testcase 1267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1268

Testcase 1268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1269

Testcase 1269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1270

Testcase 1270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1271

Testcase 1271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1272

Testcase 1272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1273

Testcase 1273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1274

Testcase 1274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1275

Testcase 1275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1276

Testcase 1276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1277

Testcase 1277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1278

Testcase 1278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1279

Testcase 1279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1280

Testcase 1280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1281

Testcase 1281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1282

Testcase 1282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1283

Testcase 1283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1284

Testcase 1284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1285

Testcase 1285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1286

Testcase 1286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1287

Testcase 1287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1288

Testcase 1288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1289

Testcase 1289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1290

Testcase 1290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1291

Testcase 1291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1292

Testcase 1292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1293

Testcase 1293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1294

Testcase 1294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1295

Testcase 1295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1296

Testcase 1296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1297

Testcase 1297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1298

Testcase 1298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1299

Testcase 1299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1300

Testcase 1300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1301

Testcase 1301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1302

Testcase 1302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1303

Testcase 1303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc1304

Testcase 1304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1305

Testcase 1305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1306

Testcase 1306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1307

Testcase 1307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1308

Testcase 1308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1309

Testcase 1309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1310

Testcase 1310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1311

Testcase 1311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1312

Testcase 1312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1313

Testcase 1313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1314

Testcase 1314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1315

Testcase 1315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1316

Testcase 1316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1317

Testcase 1317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1318

Testcase 1318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1319

Testcase 1319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1320

Testcase 1320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1321

Testcase 1321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1322

Testcase 1322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1323

Testcase 1323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1324

Testcase 1324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1325

Testcase 1325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1326

Testcase 1326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1327

Testcase 1327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1328

Testcase 1328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1329

Testcase 1329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1330

Testcase 1330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1331

Testcase 1331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1332

Testcase 1332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1333

Testcase 1333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1334

Testcase 1334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1335

Testcase 1335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1336

Testcase 1336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1337

Testcase 1337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1338

Testcase 1338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1339

Testcase 1339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1340

Testcase 1340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1341

Testcase 1341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1342

Testcase 1342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1343

Testcase 1343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1344

Testcase 1344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1345

Testcase 1345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1346

Testcase 1346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1347

Testcase 1347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1348

Testcase 1348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1349

Testcase 1349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1350

Testcase 1350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1351

Testcase 1351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1352

Testcase 1352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1353

Testcase 1353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1354

Testcase 1354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1355

Testcase 1355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1356

Testcase 1356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1357

Testcase 1357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1358

Testcase 1358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1359

Testcase 1359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1360

Testcase 1360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1361

Testcase 1361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1362

Testcase 1362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1363

Testcase 1363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1364

Testcase 1364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1365

Testcase 1365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1366

Testcase 1366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1367

Testcase 1367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1368

Testcase 1368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1369

Testcase 1369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1370

Testcase 1370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1371

Testcase 1371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1372

Testcase 1372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1373

Testcase 1373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1374

Testcase 1374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1375

Testcase 1375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1376

Testcase 1376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1377

Testcase 1377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1378

Testcase 1378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1379

Testcase 1379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1380

Testcase 1380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1381

Testcase 1381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1382

Testcase 1382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1383

Testcase 1383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1384

Testcase 1384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc1385

Testcase 1385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1386

Testcase 1386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1387

Testcase 1387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1388

Testcase 1388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1389

Testcase 1389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1390

Testcase 1390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1391

Testcase 1391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1392

Testcase 1392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1393

Testcase 1393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1394

Testcase 1394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1395

Testcase 1395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1396

Testcase 1396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1397

Testcase 1397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1398

Testcase 1398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1399

Testcase 1399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1400

Testcase 1400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1401

Testcase 1401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1402

Testcase 1402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1403

Testcase 1403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1404

Testcase 1404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1405

Testcase 1405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1406

Testcase 1406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1407

Testcase 1407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1408

Testcase 1408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1409

Testcase 1409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1410

Testcase 1410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1411

Testcase 1411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1412

Testcase 1412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1413

Testcase 1413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1414

Testcase 1414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1415

Testcase 1415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1416

Testcase 1416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1417

Testcase 1417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1418

Testcase 1418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1419

Testcase 1419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1420

Testcase 1420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1421

Testcase 1421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1422

Testcase 1422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1423

Testcase 1423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1424

Testcase 1424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1425

Testcase 1425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1426

Testcase 1426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1427

Testcase 1427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1428

Testcase 1428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1429

Testcase 1429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1430

Testcase 1430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1431

Testcase 1431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1432

Testcase 1432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1433

Testcase 1433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1434

Testcase 1434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1435

Testcase 1435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1436

Testcase 1436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1437

Testcase 1437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1438

Testcase 1438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:41+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1439

Testcase 1439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1440

Testcase 1440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1441

Testcase 1441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1442

Testcase 1442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1443

Testcase 1443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1444

Testcase 1444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1445

Testcase 1445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1446

Testcase 1446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1447

Testcase 1447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1448

Testcase 1448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1449

Testcase 1449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1450

Testcase 1450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1451

Testcase 1451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1452

Testcase 1452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1453

Testcase 1453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1454

Testcase 1454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1455

Testcase 1455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1456

Testcase 1456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1457

Testcase 1457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1458

Testcase 1458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1459

Testcase 1459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1460

Testcase 1460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1461

Testcase 1461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1462

Testcase 1462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1463

Testcase 1463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1464

Testcase 1464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1465

Testcase 1465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc1466

Testcase 1466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1467

Testcase 1467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1468

Testcase 1468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1469

Testcase 1469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1470

Testcase 1470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1471

Testcase 1471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1472

Testcase 1472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1473

Testcase 1473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1474

Testcase 1474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1475

Testcase 1475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1476

Testcase 1476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1477

Testcase 1477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1478

Testcase 1478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1479

Testcase 1479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1480

Testcase 1480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1481

Testcase 1481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1482

Testcase 1482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1483

Testcase 1483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1484

Testcase 1484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1485

Testcase 1485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1486

Testcase 1486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1487

Testcase 1487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1488

Testcase 1488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1489

Testcase 1489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1490

Testcase 1490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1491

Testcase 1491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1492

Testcase 1492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1493

Testcase 1493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1494

Testcase 1494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1495

Testcase 1495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1496

Testcase 1496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1497

Testcase 1497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1498

Testcase 1498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1499

Testcase 1499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1500

Testcase 1500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1501

Testcase 1501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1502

Testcase 1502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1503

Testcase 1503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1504

Testcase 1504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1505

Testcase 1505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1506

Testcase 1506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1507

Testcase 1507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1508

Testcase 1508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1509

Testcase 1509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1510

Testcase 1510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1511

Testcase 1511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1512

Testcase 1512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1513

Testcase 1513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1514

Testcase 1514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1515

Testcase 1515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1516

Testcase 1516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1517

Testcase 1517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1518

Testcase 1518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1519

Testcase 1519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1520

Testcase 1520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1521

Testcase 1521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1522

Testcase 1522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1523

Testcase 1523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1524

Testcase 1524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1525

Testcase 1525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1526

Testcase 1526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1527

Testcase 1527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1528

Testcase 1528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1529

Testcase 1529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1530

Testcase 1530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1531

Testcase 1531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1532

Testcase 1532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1533

Testcase 1533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1534

Testcase 1534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1535

Testcase 1535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1536

Testcase 1536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1537

Testcase 1537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1538

Testcase 1538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1539

Testcase 1539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1540

Testcase 1540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1541

Testcase 1541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1542

Testcase 1542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1543

Testcase 1543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1544

Testcase 1544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1545

Testcase 1545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1546

Testcase 1546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc1547

Testcase 1547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1548

Testcase 1548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1549

Testcase 1549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1550

Testcase 1550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1551

Testcase 1551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1552

Testcase 1552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1553

Testcase 1553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1554

Testcase 1554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1555

Testcase 1555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1556

Testcase 1556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1557

Testcase 1557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1558

Testcase 1558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1559

Testcase 1559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1560

Testcase 1560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1561

Testcase 1561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1562

Testcase 1562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1563

Testcase 1563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1564

Testcase 1564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1565

Testcase 1565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1566

Testcase 1566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1567

Testcase 1567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1568

Testcase 1568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1569

Testcase 1569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1570

Testcase 1570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1571

Testcase 1571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1572

Testcase 1572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1573

Testcase 1573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1574

Testcase 1574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1575

Testcase 1575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1576

Testcase 1576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1577

Testcase 1577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1578

Testcase 1578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1579

Testcase 1579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1580

Testcase 1580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1581

Testcase 1581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1582

Testcase 1582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1583

Testcase 1583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1584

Testcase 1584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1585

Testcase 1585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1586

Testcase 1586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1587

Testcase 1587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1588

Testcase 1588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1589

Testcase 1589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1590

Testcase 1590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1591

Testcase 1591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1592

Testcase 1592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1593

Testcase 1593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1594

Testcase 1594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1595

Testcase 1595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1596

Testcase 1596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1597

Testcase 1597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1598

Testcase 1598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1599

Testcase 1599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1600

Testcase 1600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1601

Testcase 1601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1602

Testcase 1602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1603

Testcase 1603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1604

Testcase 1604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1605

Testcase 1605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1606

Testcase 1606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1607

Testcase 1607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1608

Testcase 1608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1609

Testcase 1609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1610

Testcase 1610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1611

Testcase 1611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1612

Testcase 1612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1613

Testcase 1613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1614

Testcase 1614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1615

Testcase 1615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1616

Testcase 1616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1617

Testcase 1617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1618

Testcase 1618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1619

Testcase 1619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1620

Testcase 1620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1621

Testcase 1621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1622

Testcase 1622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1623

Testcase 1623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1624

Testcase 1624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1625

Testcase 1625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1626

Testcase 1626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1627

Testcase 1627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc1628

Testcase 1628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1629

Testcase 1629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1630

Testcase 1630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1631

Testcase 1631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1632

Testcase 1632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1633

Testcase 1633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1634

Testcase 1634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1635

Testcase 1635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1636

Testcase 1636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1637

Testcase 1637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1638

Testcase 1638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1639

Testcase 1639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1640

Testcase 1640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1641

Testcase 1641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1642

Testcase 1642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1643

Testcase 1643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1644

Testcase 1644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1645

Testcase 1645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1646

Testcase 1646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1647

Testcase 1647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1648

Testcase 1648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1649

Testcase 1649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1650

Testcase 1650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1651

Testcase 1651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1652

Testcase 1652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1653

Testcase 1653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1654

Testcase 1654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1655

Testcase 1655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1656

Testcase 1656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1657

Testcase 1657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1658

Testcase 1658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1659

Testcase 1659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1660

Testcase 1660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1661

Testcase 1661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1662

Testcase 1662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1663

Testcase 1663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1664

Testcase 1664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1665

Testcase 1665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1666

Testcase 1666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1667

Testcase 1667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1668

Testcase 1668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1669

Testcase 1669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1670

Testcase 1670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1671

Testcase 1671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1672

Testcase 1672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1673

Testcase 1673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1674

Testcase 1674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1675

Testcase 1675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1676

Testcase 1676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1677

Testcase 1677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1678

Testcase 1678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1679

Testcase 1679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1680

Testcase 1680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1681

Testcase 1681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1682

Testcase 1682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1683

Testcase 1683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1684

Testcase 1684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1685

Testcase 1685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1686

Testcase 1686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1687

Testcase 1687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1688

Testcase 1688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1689

Testcase 1689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1690

Testcase 1690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1691

Testcase 1691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1692

Testcase 1692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1693

Testcase 1693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1694

Testcase 1694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1695

Testcase 1695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1696

Testcase 1696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1697

Testcase 1697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1698

Testcase 1698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1699

Testcase 1699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1700

Testcase 1700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1701

Testcase 1701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1702

Testcase 1702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1703

Testcase 1703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1704

Testcase 1704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1705

Testcase 1705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1706

Testcase 1706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1707

Testcase 1707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1708

Testcase 1708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc1709

Testcase 1709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1710

Testcase 1710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1711

Testcase 1711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1712

Testcase 1712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1713

Testcase 1713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1714

Testcase 1714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1715

Testcase 1715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1716

Testcase 1716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1717

Testcase 1717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1718

Testcase 1718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1719

Testcase 1719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1720

Testcase 1720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1721

Testcase 1721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1722

Testcase 1722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1723

Testcase 1723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1724

Testcase 1724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1725

Testcase 1725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1726

Testcase 1726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1727

Testcase 1727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1728

Testcase 1728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1729

Testcase 1729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1730

Testcase 1730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1731

Testcase 1731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1732

Testcase 1732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1733

Testcase 1733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1734

Testcase 1734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1735

Testcase 1735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1736

Testcase 1736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1737

Testcase 1737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1738

Testcase 1738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1739

Testcase 1739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1740

Testcase 1740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1741

Testcase 1741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1742

Testcase 1742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1743

Testcase 1743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1744

Testcase 1744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1745

Testcase 1745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1746

Testcase 1746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1747

Testcase 1747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1748

Testcase 1748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1749

Testcase 1749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1750

Testcase 1750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1751

Testcase 1751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1752

Testcase 1752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1753

Testcase 1753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1754

Testcase 1754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1755

Testcase 1755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1756

Testcase 1756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1757

Testcase 1757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1758

Testcase 1758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1759

Testcase 1759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1760

Testcase 1760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1761

Testcase 1761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1762

Testcase 1762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1763

Testcase 1763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1764

Testcase 1764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1765

Testcase 1765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1766

Testcase 1766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1767

Testcase 1767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1768

Testcase 1768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1769

Testcase 1769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1770

Testcase 1770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1771

Testcase 1771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1772

Testcase 1772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1773

Testcase 1773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1774

Testcase 1774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1775

Testcase 1775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1776

Testcase 1776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1777

Testcase 1777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1778

Testcase 1778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1779

Testcase 1779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1780

Testcase 1780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1781

Testcase 1781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1782

Testcase 1782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1783

Testcase 1783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1784

Testcase 1784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1785

Testcase 1785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1786

Testcase 1786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1787

Testcase 1787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1788

Testcase 1788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1789

Testcase 1789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc1790

Testcase 1790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1791

Testcase 1791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1792

Testcase 1792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1793

Testcase 1793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1794

Testcase 1794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1795

Testcase 1795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1796

Testcase 1796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1797

Testcase 1797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1798

Testcase 1798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1799

Testcase 1799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1800

Testcase 1800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1801

Testcase 1801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1802

Testcase 1802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1803

Testcase 1803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1804

Testcase 1804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1805

Testcase 1805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1806

Testcase 1806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1807

Testcase 1807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1808

Testcase 1808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1809

Testcase 1809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1810

Testcase 1810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1811

Testcase 1811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1812

Testcase 1812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1813

Testcase 1813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1814

Testcase 1814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1815

Testcase 1815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1816

Testcase 1816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1817

Testcase 1817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1818

Testcase 1818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1819

Testcase 1819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1820

Testcase 1820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1821

Testcase 1821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1822

Testcase 1822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1823

Testcase 1823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1824

Testcase 1824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1825

Testcase 1825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1826

Testcase 1826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1827

Testcase 1827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1828

Testcase 1828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1829

Testcase 1829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1830

Testcase 1830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1831

Testcase 1831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1832

Testcase 1832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1833

Testcase 1833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1834

Testcase 1834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1835

Testcase 1835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1836

Testcase 1836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1837

Testcase 1837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1838

Testcase 1838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1839

Testcase 1839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1840

Testcase 1840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1841

Testcase 1841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1842

Testcase 1842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1843

Testcase 1843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1844

Testcase 1844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1845

Testcase 1845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1846

Testcase 1846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1847

Testcase 1847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1848

Testcase 1848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1849

Testcase 1849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1850

Testcase 1850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1851

Testcase 1851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1852

Testcase 1852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1853

Testcase 1853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1854

Testcase 1854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1855

Testcase 1855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1856

Testcase 1856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1857

Testcase 1857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1858

Testcase 1858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1859

Testcase 1859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1860

Testcase 1860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1861

Testcase 1861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1862

Testcase 1862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1863

Testcase 1863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1864

Testcase 1864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1865

Testcase 1865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1866

Testcase 1866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1867

Testcase 1867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1868

Testcase 1868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1869

Testcase 1869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1870

Testcase 1870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc1871

Testcase 1871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1872

Testcase 1872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1873

Testcase 1873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1874

Testcase 1874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1875

Testcase 1875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1876

Testcase 1876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1877

Testcase 1877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1878

Testcase 1878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1879

Testcase 1879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1880

Testcase 1880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1881

Testcase 1881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1882

Testcase 1882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1883

Testcase 1883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1884

Testcase 1884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1885

Testcase 1885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1886

Testcase 1886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1887

Testcase 1887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1888

Testcase 1888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1889

Testcase 1889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1890

Testcase 1890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1891

Testcase 1891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1892

Testcase 1892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1893

Testcase 1893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1894

Testcase 1894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1895

Testcase 1895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1896

Testcase 1896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1897

Testcase 1897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1898

Testcase 1898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1899

Testcase 1899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1900

Testcase 1900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1901

Testcase 1901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1902

Testcase 1902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1903

Testcase 1903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1904

Testcase 1904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1905

Testcase 1905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1906

Testcase 1906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1907

Testcase 1907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1908

Testcase 1908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1909

Testcase 1909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1910

Testcase 1910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1911

Testcase 1911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1912

Testcase 1912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1913

Testcase 1913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1914

Testcase 1914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1915

Testcase 1915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1916

Testcase 1916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1917

Testcase 1917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1918

Testcase 1918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1919

Testcase 1919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1920

Testcase 1920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1921

Testcase 1921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1922

Testcase 1922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc1923

Testcase 1923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1924

Testcase 1924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1925

Testcase 1925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1926

Testcase 1926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1927

Testcase 1927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1928

Testcase 1928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1929

Testcase 1929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1930

Testcase 1930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1931

Testcase 1931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1932

Testcase 1932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1933

Testcase 1933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1934

Testcase 1934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1935

Testcase 1935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1936

Testcase 1936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1937

Testcase 1937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1938

Testcase 1938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1939

Testcase 1939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1940

Testcase 1940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1941

Testcase 1941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1942

Testcase 1942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1943

Testcase 1943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1944

Testcase 1944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1945

Testcase 1945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1946

Testcase 1946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1947

Testcase 1947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1948

Testcase 1948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1949

Testcase 1949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1950

Testcase 1950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1951

Testcase 1951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc1952

Testcase 1952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1953

Testcase 1953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1954

Testcase 1954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1955

Testcase 1955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1956

Testcase 1956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1957

Testcase 1957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1958

Testcase 1958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1959

Testcase 1959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1960

Testcase 1960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1961

Testcase 1961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1962

Testcase 1962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1963

Testcase 1963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1964

Testcase 1964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1965

Testcase 1965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1966

Testcase 1966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1967

Testcase 1967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1968

Testcase 1968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1969

Testcase 1969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1970

Testcase 1970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1971

Testcase 1971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1972

Testcase 1972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1973

Testcase 1973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1974

Testcase 1974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1975

Testcase 1975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1976

Testcase 1976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1977

Testcase 1977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1978

Testcase 1978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1979

Testcase 1979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1980

Testcase 1980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1981

Testcase 1981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1982

Testcase 1982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1983

Testcase 1983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1984

Testcase 1984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1985

Testcase 1985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1986

Testcase 1986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1987

Testcase 1987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1988

Testcase 1988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1989

Testcase 1989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1990

Testcase 1990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1991

Testcase 1991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1992

Testcase 1992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1993

Testcase 1993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1994

Testcase 1994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1995

Testcase 1995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1996

Testcase 1996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1997

Testcase 1997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1998

Testcase 1998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc1999

Testcase 1999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2000

Testcase 2000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2001

Testcase 2001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2002

Testcase 2002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2003

Testcase 2003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2004

Testcase 2004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2005

Testcase 2005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2006

Testcase 2006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2007

Testcase 2007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2008

Testcase 2008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2009

Testcase 2009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2010

Testcase 2010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2011

Testcase 2011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2012

Testcase 2012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2013

Testcase 2013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2014

Testcase 2014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2015

Testcase 2015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2016

Testcase 2016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2017

Testcase 2017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2018

Testcase 2018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2019

Testcase 2019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2020

Testcase 2020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2021

Testcase 2021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2022

Testcase 2022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2023

Testcase 2023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2024

Testcase 2024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2025

Testcase 2025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2026

Testcase 2026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2027

Testcase 2027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2028

Testcase 2028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2029

Testcase 2029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2030

Testcase 2030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2031

Testcase 2031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2032

Testcase 2032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc2033

Testcase 2033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2034

Testcase 2034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2035

Testcase 2035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2036

Testcase 2036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2037

Testcase 2037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2038

Testcase 2038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2039

Testcase 2039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2040

Testcase 2040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2041

Testcase 2041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2042

Testcase 2042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2043

Testcase 2043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2044

Testcase 2044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2045

Testcase 2045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2046

Testcase 2046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2047

Testcase 2047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2048

Testcase 2048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2049

Testcase 2049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2050

Testcase 2050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2051

Testcase 2051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2052

Testcase 2052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2053

Testcase 2053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2054

Testcase 2054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2055

Testcase 2055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2056

Testcase 2056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2057

Testcase 2057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2058

Testcase 2058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2059

Testcase 2059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2060

Testcase 2060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2061

Testcase 2061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2062

Testcase 2062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2063

Testcase 2063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2064

Testcase 2064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2065

Testcase 2065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2066

Testcase 2066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2067

Testcase 2067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2068

Testcase 2068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2069

Testcase 2069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2070

Testcase 2070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2071

Testcase 2071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2072

Testcase 2072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2073

Testcase 2073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2074

Testcase 2074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2075

Testcase 2075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2076

Testcase 2076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2077

Testcase 2077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2078

Testcase 2078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2079

Testcase 2079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2080

Testcase 2080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2081

Testcase 2081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2082

Testcase 2082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2083

Testcase 2083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2084

Testcase 2084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2085

Testcase 2085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2086

Testcase 2086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2087

Testcase 2087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2088

Testcase 2088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2089

Testcase 2089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2090

Testcase 2090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2091

Testcase 2091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2092

Testcase 2092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2093

Testcase 2093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2094

Testcase 2094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2095

Testcase 2095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2096

Testcase 2096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2097

Testcase 2097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2098

Testcase 2098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2099

Testcase 2099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2100

Testcase 2100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2101

Testcase 2101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2102

Testcase 2102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2103

Testcase 2103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2104

Testcase 2104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2105

Testcase 2105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2106

Testcase 2106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2107

Testcase 2107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2108

Testcase 2108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2109

Testcase 2109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2110

Testcase 2110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2111

Testcase 2111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2112

Testcase 2112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2113

Testcase 2113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc2114

Testcase 2114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2115

Testcase 2115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2116

Testcase 2116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2117

Testcase 2117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2118

Testcase 2118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2119

Testcase 2119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2120

Testcase 2120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2121

Testcase 2121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2122

Testcase 2122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2123

Testcase 2123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2124

Testcase 2124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2125

Testcase 2125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2126

Testcase 2126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2127

Testcase 2127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2128

Testcase 2128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2129

Testcase 2129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2130

Testcase 2130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2131

Testcase 2131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2132

Testcase 2132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2133

Testcase 2133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2134

Testcase 2134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2135

Testcase 2135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2136

Testcase 2136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2137

Testcase 2137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2138

Testcase 2138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2139

Testcase 2139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2140

Testcase 2140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2141

Testcase 2141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2142

Testcase 2142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2143

Testcase 2143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2144

Testcase 2144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2145

Testcase 2145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2146

Testcase 2146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2147

Testcase 2147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2148

Testcase 2148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2149

Testcase 2149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2150

Testcase 2150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2151

Testcase 2151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2152

Testcase 2152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2153

Testcase 2153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2154

Testcase 2154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2155

Testcase 2155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2156

Testcase 2156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2157

Testcase 2157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2158

Testcase 2158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2159

Testcase 2159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2160

Testcase 2160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2161

Testcase 2161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2162

Testcase 2162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2163

Testcase 2163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2164

Testcase 2164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2165

Testcase 2165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2166

Testcase 2166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2167

Testcase 2167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2168

Testcase 2168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2169

Testcase 2169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2170

Testcase 2170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2171

Testcase 2171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2172

Testcase 2172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2173

Testcase 2173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2174

Testcase 2174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2175

Testcase 2175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2176

Testcase 2176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2177

Testcase 2177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2178

Testcase 2178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2179

Testcase 2179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2180

Testcase 2180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2181

Testcase 2181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2182

Testcase 2182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2183

Testcase 2183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2184

Testcase 2184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2185

Testcase 2185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2186

Testcase 2186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2187

Testcase 2187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2188

Testcase 2188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2189

Testcase 2189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2190

Testcase 2190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2191

Testcase 2191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2192

Testcase 2192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2193

Testcase 2193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2194

Testcase 2194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc2195

Testcase 2195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2196

Testcase 2196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2197

Testcase 2197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2198

Testcase 2198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2199

Testcase 2199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2200

Testcase 2200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2201

Testcase 2201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2202

Testcase 2202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2203

Testcase 2203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2204

Testcase 2204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2205

Testcase 2205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2206

Testcase 2206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2207

Testcase 2207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2208

Testcase 2208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2209

Testcase 2209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2210

Testcase 2210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2211

Testcase 2211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2212

Testcase 2212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2213

Testcase 2213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2214

Testcase 2214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2215

Testcase 2215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2216

Testcase 2216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2217

Testcase 2217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2218

Testcase 2218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2219

Testcase 2219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2220

Testcase 2220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2221

Testcase 2221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2222

Testcase 2222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2223

Testcase 2223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2224

Testcase 2224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2225

Testcase 2225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2226

Testcase 2226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2227

Testcase 2227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2228

Testcase 2228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2229

Testcase 2229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2230

Testcase 2230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2231

Testcase 2231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2232

Testcase 2232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2233

Testcase 2233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2234

Testcase 2234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2235

Testcase 2235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2236

Testcase 2236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2237

Testcase 2237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2238

Testcase 2238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2239

Testcase 2239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2240

Testcase 2240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2241

Testcase 2241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2242

Testcase 2242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2243

Testcase 2243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2244

Testcase 2244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2245

Testcase 2245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2246

Testcase 2246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2247

Testcase 2247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2248

Testcase 2248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2249

Testcase 2249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2250

Testcase 2250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2251

Testcase 2251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2252

Testcase 2252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2253

Testcase 2253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2254

Testcase 2254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2255

Testcase 2255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2256

Testcase 2256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2257

Testcase 2257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2258

Testcase 2258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2259

Testcase 2259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2260

Testcase 2260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2261

Testcase 2261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2262

Testcase 2262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2263

Testcase 2263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2264

Testcase 2264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2265

Testcase 2265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2266

Testcase 2266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2267

Testcase 2267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2268

Testcase 2268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2269

Testcase 2269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2270

Testcase 2270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2271

Testcase 2271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2272

Testcase 2272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2273

Testcase 2273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2274

Testcase 2274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2275

Testcase 2275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc2276

Testcase 2276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2277

Testcase 2277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2278

Testcase 2278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2279

Testcase 2279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2280

Testcase 2280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2281

Testcase 2281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2282

Testcase 2282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2283

Testcase 2283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2284

Testcase 2284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2285

Testcase 2285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2286

Testcase 2286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2287

Testcase 2287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2288

Testcase 2288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2289

Testcase 2289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2290

Testcase 2290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2291

Testcase 2291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2292

Testcase 2292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2293

Testcase 2293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2294

Testcase 2294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2295

Testcase 2295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2296

Testcase 2296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2297

Testcase 2297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2298

Testcase 2298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2299

Testcase 2299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2300

Testcase 2300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2301

Testcase 2301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2302

Testcase 2302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2303

Testcase 2303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2304

Testcase 2304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2305

Testcase 2305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2306

Testcase 2306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2307

Testcase 2307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2308

Testcase 2308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2309

Testcase 2309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2310

Testcase 2310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2311

Testcase 2311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2312

Testcase 2312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2313

Testcase 2313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2314

Testcase 2314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2315

Testcase 2315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2316

Testcase 2316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2317

Testcase 2317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2318

Testcase 2318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2319

Testcase 2319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2320

Testcase 2320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2321

Testcase 2321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2322

Testcase 2322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2323

Testcase 2323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2324

Testcase 2324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2325

Testcase 2325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2326

Testcase 2326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2327

Testcase 2327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2328

Testcase 2328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2329

Testcase 2329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2330

Testcase 2330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2331

Testcase 2331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2332

Testcase 2332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2333

Testcase 2333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2334

Testcase 2334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2335

Testcase 2335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2336

Testcase 2336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2337

Testcase 2337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2338

Testcase 2338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2339

Testcase 2339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2340

Testcase 2340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2341

Testcase 2341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2342

Testcase 2342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2343

Testcase 2343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2344

Testcase 2344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2345

Testcase 2345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2346

Testcase 2346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2347

Testcase 2347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2348

Testcase 2348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2349

Testcase 2349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2350

Testcase 2350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2351

Testcase 2351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2352

Testcase 2352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2353

Testcase 2353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2354

Testcase 2354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2355

Testcase 2355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2356

Testcase 2356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc2357

Testcase 2357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2358

Testcase 2358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2359

Testcase 2359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2360

Testcase 2360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2361

Testcase 2361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2362

Testcase 2362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2363

Testcase 2363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2364

Testcase 2364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2365

Testcase 2365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2366

Testcase 2366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2367

Testcase 2367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2368

Testcase 2368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2369

Testcase 2369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2370

Testcase 2370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2371

Testcase 2371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2372

Testcase 2372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2373

Testcase 2373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2374

Testcase 2374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2375

Testcase 2375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2376

Testcase 2376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2377

Testcase 2377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2378

Testcase 2378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2379

Testcase 2379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2380

Testcase 2380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2381

Testcase 2381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2382

Testcase 2382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2383

Testcase 2383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2384

Testcase 2384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2385

Testcase 2385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2386

Testcase 2386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2387

Testcase 2387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2388

Testcase 2388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2389

Testcase 2389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2390

Testcase 2390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2391

Testcase 2391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2392

Testcase 2392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2393

Testcase 2393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2394

Testcase 2394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2395

Testcase 2395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2396

Testcase 2396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2397

Testcase 2397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2398

Testcase 2398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2399

Testcase 2399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2400

Testcase 2400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2401

Testcase 2401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2402

Testcase 2402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2403

Testcase 2403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2404

Testcase 2404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2405

Testcase 2405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2406

Testcase 2406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2407

Testcase 2407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2408

Testcase 2408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2409

Testcase 2409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2410

Testcase 2410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2411

Testcase 2411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2412

Testcase 2412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2413

Testcase 2413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2414

Testcase 2414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2415

Testcase 2415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2416

Testcase 2416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2417

Testcase 2417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2418

Testcase 2418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2419

Testcase 2419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2420

Testcase 2420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2421

Testcase 2421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2422

Testcase 2422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2423

Testcase 2423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2424

Testcase 2424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2425

Testcase 2425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2426

Testcase 2426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2427

Testcase 2427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2428

Testcase 2428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2429

Testcase 2429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2430

Testcase 2430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2431

Testcase 2431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2432

Testcase 2432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2433

Testcase 2433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2434

Testcase 2434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2435

Testcase 2435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2436

Testcase 2436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2437

Testcase 2437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc2438

Testcase 2438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2439

Testcase 2439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2440

Testcase 2440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2441

Testcase 2441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2442

Testcase 2442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2443

Testcase 2443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2444

Testcase 2444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2445

Testcase 2445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2446

Testcase 2446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2447

Testcase 2447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2448

Testcase 2448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2449

Testcase 2449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2450

Testcase 2450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2451

Testcase 2451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2452

Testcase 2452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2453

Testcase 2453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2454

Testcase 2454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2455

Testcase 2455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2456

Testcase 2456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2457

Testcase 2457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2458

Testcase 2458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2459

Testcase 2459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2460

Testcase 2460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2461

Testcase 2461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2462

Testcase 2462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2463

Testcase 2463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2464

Testcase 2464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2465

Testcase 2465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2466

Testcase 2466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2467

Testcase 2467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2468

Testcase 2468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2469

Testcase 2469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2470

Testcase 2470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2471

Testcase 2471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2472

Testcase 2472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2473

Testcase 2473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2474

Testcase 2474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2475

Testcase 2475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2476

Testcase 2476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2477

Testcase 2477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2478

Testcase 2478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2479

Testcase 2479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2480

Testcase 2480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2481

Testcase 2481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2482

Testcase 2482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2483

Testcase 2483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2484

Testcase 2484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2485

Testcase 2485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2486

Testcase 2486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2487

Testcase 2487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2488

Testcase 2488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2489

Testcase 2489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2490

Testcase 2490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2491

Testcase 2491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2492

Testcase 2492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2493

Testcase 2493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2494

Testcase 2494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2495

Testcase 2495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2496

Testcase 2496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2497

Testcase 2497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2498

Testcase 2498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2499

Testcase 2499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2500

Testcase 2500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2501

Testcase 2501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2502

Testcase 2502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2503

Testcase 2503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2504

Testcase 2504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2505

Testcase 2505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2506

Testcase 2506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2507

Testcase 2507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2508

Testcase 2508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2509

Testcase 2509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2510

Testcase 2510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2511

Testcase 2511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2512

Testcase 2512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2513

Testcase 2513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2514

Testcase 2514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2515

Testcase 2515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2516

Testcase 2516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2517

Testcase 2517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2518

Testcase 2518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc2519

Testcase 2519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2520

Testcase 2520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2521

Testcase 2521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2522

Testcase 2522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2523

Testcase 2523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2524

Testcase 2524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2525

Testcase 2525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2526

Testcase 2526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2527

Testcase 2527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2528

Testcase 2528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2529

Testcase 2529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2530

Testcase 2530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2531

Testcase 2531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2532

Testcase 2532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2533

Testcase 2533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2534

Testcase 2534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2535

Testcase 2535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2536

Testcase 2536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2537

Testcase 2537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2538

Testcase 2538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2539

Testcase 2539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2540

Testcase 2540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2541

Testcase 2541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2542

Testcase 2542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2543

Testcase 2543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2544

Testcase 2544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2545

Testcase 2545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2546

Testcase 2546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2547

Testcase 2547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2548

Testcase 2548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2549

Testcase 2549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2550

Testcase 2550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2551

Testcase 2551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2552

Testcase 2552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2553

Testcase 2553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2554

Testcase 2554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2555

Testcase 2555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2556

Testcase 2556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2557

Testcase 2557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2558

Testcase 2558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2559

Testcase 2559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2560

Testcase 2560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2561

Testcase 2561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2562

Testcase 2562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2563

Testcase 2563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2564

Testcase 2564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2565

Testcase 2565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2566

Testcase 2566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2567

Testcase 2567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2568

Testcase 2568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2569

Testcase 2569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2570

Testcase 2570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2571

Testcase 2571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2572

Testcase 2572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2573

Testcase 2573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2574

Testcase 2574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2575

Testcase 2575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2576

Testcase 2576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2577

Testcase 2577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2578

Testcase 2578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2579

Testcase 2579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2580

Testcase 2580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2581

Testcase 2581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2582

Testcase 2582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2583

Testcase 2583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2584

Testcase 2584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2585

Testcase 2585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2586

Testcase 2586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2587

Testcase 2587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2588

Testcase 2588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2589

Testcase 2589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2590

Testcase 2590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2591

Testcase 2591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2592

Testcase 2592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2593

Testcase 2593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2594

Testcase 2594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2595

Testcase 2595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2596

Testcase 2596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2597

Testcase 2597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2598

Testcase 2598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2599

Testcase 2599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc2600

Testcase 2600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2601

Testcase 2601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2602

Testcase 2602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2603

Testcase 2603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2604

Testcase 2604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2605

Testcase 2605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2606

Testcase 2606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2607

Testcase 2607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2608

Testcase 2608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2609

Testcase 2609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2610

Testcase 2610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2611

Testcase 2611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2612

Testcase 2612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2613

Testcase 2613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2614

Testcase 2614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2615

Testcase 2615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2616

Testcase 2616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2617

Testcase 2617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2618

Testcase 2618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2619

Testcase 2619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2620

Testcase 2620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2621

Testcase 2621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2622

Testcase 2622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2623

Testcase 2623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2624

Testcase 2624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2625

Testcase 2625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2626

Testcase 2626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2627

Testcase 2627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2628

Testcase 2628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2629

Testcase 2629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2630

Testcase 2630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2631

Testcase 2631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2632

Testcase 2632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2633

Testcase 2633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2634

Testcase 2634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2635

Testcase 2635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2636

Testcase 2636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2637

Testcase 2637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2638

Testcase 2638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2639

Testcase 2639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2640

Testcase 2640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2641

Testcase 2641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2642

Testcase 2642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2643

Testcase 2643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2644

Testcase 2644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2645

Testcase 2645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2646

Testcase 2646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2647

Testcase 2647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2648

Testcase 2648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2649

Testcase 2649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2650

Testcase 2650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2651

Testcase 2651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc2652

Testcase 2652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2653

Testcase 2653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2654

Testcase 2654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2655

Testcase 2655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2656

Testcase 2656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2657

Testcase 2657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2658

Testcase 2658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2659

Testcase 2659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2660

Testcase 2660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2661

Testcase 2661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2662

Testcase 2662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2663

Testcase 2663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2664

Testcase 2664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2665

Testcase 2665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2666

Testcase 2666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2667

Testcase 2667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2668

Testcase 2668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2669

Testcase 2669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2670

Testcase 2670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2671

Testcase 2671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2672

Testcase 2672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2673

Testcase 2673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2674

Testcase 2674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2675

Testcase 2675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2676

Testcase 2676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2677

Testcase 2677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2678

Testcase 2678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2679

Testcase 2679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2680

Testcase 2680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc2681

Testcase 2681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2682

Testcase 2682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2683

Testcase 2683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2684

Testcase 2684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2685

Testcase 2685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2686

Testcase 2686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2687

Testcase 2687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2688

Testcase 2688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2689

Testcase 2689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2690

Testcase 2690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2691

Testcase 2691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2692

Testcase 2692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2693

Testcase 2693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2694

Testcase 2694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2695

Testcase 2695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2696

Testcase 2696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2697

Testcase 2697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2698

Testcase 2698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2699

Testcase 2699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2700

Testcase 2700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2701

Testcase 2701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2702

Testcase 2702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2703

Testcase 2703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2704

Testcase 2704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2705

Testcase 2705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2706

Testcase 2706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2707

Testcase 2707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2708

Testcase 2708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2709

Testcase 2709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2710

Testcase 2710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2711

Testcase 2711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2712

Testcase 2712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2713

Testcase 2713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2714

Testcase 2714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2715

Testcase 2715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2716

Testcase 2716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2717

Testcase 2717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2718

Testcase 2718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2719

Testcase 2719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2720

Testcase 2720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2721

Testcase 2721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2722

Testcase 2722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2723

Testcase 2723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2724

Testcase 2724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2725

Testcase 2725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2726

Testcase 2726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2727

Testcase 2727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2728

Testcase 2728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2729

Testcase 2729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2730

Testcase 2730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2731

Testcase 2731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2732

Testcase 2732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2733

Testcase 2733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2734

Testcase 2734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2735

Testcase 2735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2736

Testcase 2736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2737

Testcase 2737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2738

Testcase 2738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2739

Testcase 2739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2740

Testcase 2740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2741

Testcase 2741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2742

Testcase 2742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2743

Testcase 2743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2744

Testcase 2744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2745

Testcase 2745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2746

Testcase 2746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2747

Testcase 2747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2748

Testcase 2748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2749

Testcase 2749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2750

Testcase 2750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2751

Testcase 2751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2752

Testcase 2752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2753

Testcase 2753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2754

Testcase 2754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2755

Testcase 2755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2756

Testcase 2756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2757

Testcase 2757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2758

Testcase 2758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2759

Testcase 2759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2760

Testcase 2760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2761

Testcase 2761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc2762

Testcase 2762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2763

Testcase 2763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2764

Testcase 2764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2765

Testcase 2765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2766

Testcase 2766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2767

Testcase 2767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2768

Testcase 2768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2769

Testcase 2769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2770

Testcase 2770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2771

Testcase 2771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2772

Testcase 2772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2773

Testcase 2773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2774

Testcase 2774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2775

Testcase 2775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2776

Testcase 2776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2777

Testcase 2777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2778

Testcase 2778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2779

Testcase 2779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2780

Testcase 2780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2781

Testcase 2781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2782

Testcase 2782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2783

Testcase 2783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2784

Testcase 2784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2785

Testcase 2785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2786

Testcase 2786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2787

Testcase 2787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2788

Testcase 2788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2789

Testcase 2789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2790

Testcase 2790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2791

Testcase 2791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2792

Testcase 2792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2793

Testcase 2793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2794

Testcase 2794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2795

Testcase 2795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2796

Testcase 2796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2797

Testcase 2797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2798

Testcase 2798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2799

Testcase 2799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2800

Testcase 2800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2801

Testcase 2801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2802

Testcase 2802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2803

Testcase 2803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2804

Testcase 2804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2805

Testcase 2805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2806

Testcase 2806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2807

Testcase 2807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2808

Testcase 2808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2809

Testcase 2809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2810

Testcase 2810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2811

Testcase 2811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2812

Testcase 2812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2813

Testcase 2813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2814

Testcase 2814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2815

Testcase 2815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2816

Testcase 2816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2817

Testcase 2817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2818

Testcase 2818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2819

Testcase 2819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2820

Testcase 2820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2821

Testcase 2821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2822

Testcase 2822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2823

Testcase 2823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2824

Testcase 2824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2825

Testcase 2825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2826

Testcase 2826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2827

Testcase 2827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2828

Testcase 2828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2829

Testcase 2829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2830

Testcase 2830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2831

Testcase 2831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2832

Testcase 2832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2833

Testcase 2833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2834

Testcase 2834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2835

Testcase 2835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2836

Testcase 2836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2837

Testcase 2837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2838

Testcase 2838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2839

Testcase 2839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2840

Testcase 2840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2841

Testcase 2841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2842

Testcase 2842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc2843

Testcase 2843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2844

Testcase 2844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2845

Testcase 2845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2846

Testcase 2846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2847

Testcase 2847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2848

Testcase 2848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2849

Testcase 2849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2850

Testcase 2850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2851

Testcase 2851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2852

Testcase 2852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2853

Testcase 2853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2854

Testcase 2854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2855

Testcase 2855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2856

Testcase 2856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2857

Testcase 2857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2858

Testcase 2858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2859

Testcase 2859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2860

Testcase 2860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2861

Testcase 2861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2862

Testcase 2862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2863

Testcase 2863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2864

Testcase 2864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2865

Testcase 2865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2866

Testcase 2866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2867

Testcase 2867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2868

Testcase 2868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2869

Testcase 2869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2870

Testcase 2870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2871

Testcase 2871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2872

Testcase 2872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2873

Testcase 2873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2874

Testcase 2874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2875

Testcase 2875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2876

Testcase 2876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2877

Testcase 2877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2878

Testcase 2878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2879

Testcase 2879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2880

Testcase 2880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2881

Testcase 2881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2882

Testcase 2882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2883

Testcase 2883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2884

Testcase 2884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2885

Testcase 2885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2886

Testcase 2886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2887

Testcase 2887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2888

Testcase 2888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2889

Testcase 2889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2890

Testcase 2890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2891

Testcase 2891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2892

Testcase 2892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2893

Testcase 2893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2894

Testcase 2894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2895

Testcase 2895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2896

Testcase 2896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2897

Testcase 2897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2898

Testcase 2898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2899

Testcase 2899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2900

Testcase 2900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2901

Testcase 2901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2902

Testcase 2902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2903

Testcase 2903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2904

Testcase 2904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2905

Testcase 2905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2906

Testcase 2906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2907

Testcase 2907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2908

Testcase 2908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2909

Testcase 2909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2910

Testcase 2910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2911

Testcase 2911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2912

Testcase 2912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2913

Testcase 2913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2914

Testcase 2914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2915

Testcase 2915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2916

Testcase 2916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2917

Testcase 2917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2918

Testcase 2918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2919

Testcase 2919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2920

Testcase 2920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2921

Testcase 2921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2922

Testcase 2922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2923

Testcase 2923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc2924

Testcase 2924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2925

Testcase 2925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2926

Testcase 2926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2927

Testcase 2927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2928

Testcase 2928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2929

Testcase 2929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2930

Testcase 2930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2931

Testcase 2931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2932

Testcase 2932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2933

Testcase 2933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2934

Testcase 2934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2935

Testcase 2935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2936

Testcase 2936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2937

Testcase 2937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2938

Testcase 2938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2939

Testcase 2939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2940

Testcase 2940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2941

Testcase 2941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2942

Testcase 2942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2943

Testcase 2943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2944

Testcase 2944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2945

Testcase 2945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2946

Testcase 2946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2947

Testcase 2947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2948

Testcase 2948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2949

Testcase 2949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2950

Testcase 2950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2951

Testcase 2951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2952

Testcase 2952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2953

Testcase 2953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2954

Testcase 2954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2955

Testcase 2955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2956

Testcase 2956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2957

Testcase 2957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2958

Testcase 2958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2959

Testcase 2959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2960

Testcase 2960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2961

Testcase 2961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2962

Testcase 2962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2963

Testcase 2963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2964

Testcase 2964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2965

Testcase 2965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2966

Testcase 2966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2967

Testcase 2967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2968

Testcase 2968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2969

Testcase 2969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2970

Testcase 2970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2971

Testcase 2971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2972

Testcase 2972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2973

Testcase 2973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2974

Testcase 2974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2975

Testcase 2975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2976

Testcase 2976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2977

Testcase 2977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2978

Testcase 2978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2979

Testcase 2979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2980

Testcase 2980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2981

Testcase 2981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2982

Testcase 2982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2983

Testcase 2983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2984

Testcase 2984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2985

Testcase 2985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2986

Testcase 2986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2987

Testcase 2987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2988

Testcase 2988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2989

Testcase 2989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2990

Testcase 2990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2991

Testcase 2991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2992

Testcase 2992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2993

Testcase 2993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2994

Testcase 2994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2995

Testcase 2995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2996

Testcase 2996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2997

Testcase 2997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2998

Testcase 2998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc2999

Testcase 2999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3000

Testcase 3000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3001

Testcase 3001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3002

Testcase 3002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3003

Testcase 3003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3004

Testcase 3004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc3005

Testcase 3005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3006

Testcase 3006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3007

Testcase 3007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3008

Testcase 3008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3009

Testcase 3009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3010

Testcase 3010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3011

Testcase 3011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3012

Testcase 3012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3013

Testcase 3013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3014

Testcase 3014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3015

Testcase 3015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3016

Testcase 3016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3017

Testcase 3017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3018

Testcase 3018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3019

Testcase 3019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3020

Testcase 3020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3021

Testcase 3021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3022

Testcase 3022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3023

Testcase 3023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3024

Testcase 3024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3025

Testcase 3025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3026

Testcase 3026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3027

Testcase 3027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3028

Testcase 3028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3029

Testcase 3029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3030

Testcase 3030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3031

Testcase 3031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3032

Testcase 3032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3033

Testcase 3033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3034

Testcase 3034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3035

Testcase 3035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3036

Testcase 3036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3037

Testcase 3037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3038

Testcase 3038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3039

Testcase 3039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3040

Testcase 3040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3041

Testcase 3041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3042

Testcase 3042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3043

Testcase 3043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3044

Testcase 3044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3045

Testcase 3045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3046

Testcase 3046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3047

Testcase 3047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3048

Testcase 3048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3049

Testcase 3049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3050

Testcase 3050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3051

Testcase 3051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3052

Testcase 3052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3053

Testcase 3053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3054

Testcase 3054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3055

Testcase 3055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3056

Testcase 3056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3057

Testcase 3057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3058

Testcase 3058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3059

Testcase 3059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3060

Testcase 3060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3061

Testcase 3061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3062

Testcase 3062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3063

Testcase 3063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3064

Testcase 3064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3065

Testcase 3065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3066

Testcase 3066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3067

Testcase 3067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3068

Testcase 3068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3069

Testcase 3069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3070

Testcase 3070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3071

Testcase 3071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3072

Testcase 3072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3073

Testcase 3073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3074

Testcase 3074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3075

Testcase 3075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3076

Testcase 3076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3077

Testcase 3077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3078

Testcase 3078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3079

Testcase 3079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3080

Testcase 3080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3081

Testcase 3081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3082

Testcase 3082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3083

Testcase 3083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3084

Testcase 3084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3085

Testcase 3085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc3086

Testcase 3086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3087

Testcase 3087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3088

Testcase 3088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3089

Testcase 3089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3090

Testcase 3090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3091

Testcase 3091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3092

Testcase 3092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3093

Testcase 3093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3094

Testcase 3094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3095

Testcase 3095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3096

Testcase 3096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3097

Testcase 3097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3098

Testcase 3098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3099

Testcase 3099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3100

Testcase 3100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3101

Testcase 3101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3102

Testcase 3102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3103

Testcase 3103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3104

Testcase 3104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3105

Testcase 3105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3106

Testcase 3106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3107

Testcase 3107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3108

Testcase 3108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3109

Testcase 3109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3110

Testcase 3110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3111

Testcase 3111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3112

Testcase 3112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3113

Testcase 3113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3114

Testcase 3114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3115

Testcase 3115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3116

Testcase 3116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3117

Testcase 3117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3118

Testcase 3118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3119

Testcase 3119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3120

Testcase 3120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3121

Testcase 3121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3122

Testcase 3122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3123

Testcase 3123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3124

Testcase 3124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3125

Testcase 3125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3126

Testcase 3126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3127

Testcase 3127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3128

Testcase 3128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3129

Testcase 3129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3130

Testcase 3130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3131

Testcase 3131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3132

Testcase 3132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3133

Testcase 3133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3134

Testcase 3134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3135

Testcase 3135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3136

Testcase 3136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3137

Testcase 3137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3138

Testcase 3138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3139

Testcase 3139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3140

Testcase 3140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3141

Testcase 3141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3142

Testcase 3142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3143

Testcase 3143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3144

Testcase 3144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3145

Testcase 3145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3146

Testcase 3146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3147

Testcase 3147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3148

Testcase 3148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3149

Testcase 3149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3150

Testcase 3150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3151

Testcase 3151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3152

Testcase 3152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3153

Testcase 3153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3154

Testcase 3154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3155

Testcase 3155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3156

Testcase 3156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3157

Testcase 3157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3158

Testcase 3158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3159

Testcase 3159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3160

Testcase 3160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3161

Testcase 3161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3162

Testcase 3162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3163

Testcase 3163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3164

Testcase 3164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3165

Testcase 3165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3166

Testcase 3166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc3167

Testcase 3167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3168

Testcase 3168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3169

Testcase 3169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3170

Testcase 3170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3171

Testcase 3171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3172

Testcase 3172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3173

Testcase 3173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3174

Testcase 3174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3175

Testcase 3175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3176

Testcase 3176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3177

Testcase 3177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3178

Testcase 3178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3179

Testcase 3179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3180

Testcase 3180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3181

Testcase 3181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3182

Testcase 3182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3183

Testcase 3183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3184

Testcase 3184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3185

Testcase 3185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3186

Testcase 3186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3187

Testcase 3187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3188

Testcase 3188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3189

Testcase 3189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3190

Testcase 3190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3191

Testcase 3191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3192

Testcase 3192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3193

Testcase 3193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3194

Testcase 3194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3195

Testcase 3195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3196

Testcase 3196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3197

Testcase 3197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3198

Testcase 3198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3199

Testcase 3199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3200

Testcase 3200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3201

Testcase 3201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3202

Testcase 3202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3203

Testcase 3203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3204

Testcase 3204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3205

Testcase 3205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3206

Testcase 3206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3207

Testcase 3207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3208

Testcase 3208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3209

Testcase 3209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3210

Testcase 3210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3211

Testcase 3211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3212

Testcase 3212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3213

Testcase 3213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3214

Testcase 3214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3215

Testcase 3215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3216

Testcase 3216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3217

Testcase 3217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3218

Testcase 3218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3219

Testcase 3219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3220

Testcase 3220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3221

Testcase 3221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3222

Testcase 3222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3223

Testcase 3223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3224

Testcase 3224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3225

Testcase 3225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3226

Testcase 3226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3227

Testcase 3227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3228

Testcase 3228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3229

Testcase 3229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3230

Testcase 3230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3231

Testcase 3231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3232

Testcase 3232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3233

Testcase 3233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3234

Testcase 3234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3235

Testcase 3235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3236

Testcase 3236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3237

Testcase 3237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3238

Testcase 3238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3239

Testcase 3239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3240

Testcase 3240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3241

Testcase 3241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3242

Testcase 3242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3243

Testcase 3243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3244

Testcase 3244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3245

Testcase 3245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3246

Testcase 3246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3247

Testcase 3247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc3248

Testcase 3248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3249

Testcase 3249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3250

Testcase 3250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3251

Testcase 3251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3252

Testcase 3252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3253

Testcase 3253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3254

Testcase 3254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3255

Testcase 3255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3256

Testcase 3256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3257

Testcase 3257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3258

Testcase 3258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3259

Testcase 3259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3260

Testcase 3260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3261

Testcase 3261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3262

Testcase 3262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3263

Testcase 3263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3264

Testcase 3264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3265

Testcase 3265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3266

Testcase 3266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3267

Testcase 3267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3268

Testcase 3268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3269

Testcase 3269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3270

Testcase 3270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3271

Testcase 3271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3272

Testcase 3272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3273

Testcase 3273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3274

Testcase 3274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3275

Testcase 3275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3276

Testcase 3276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3277

Testcase 3277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3278

Testcase 3278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3279

Testcase 3279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3280

Testcase 3280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3281

Testcase 3281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3282

Testcase 3282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3283

Testcase 3283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3284

Testcase 3284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3285

Testcase 3285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3286

Testcase 3286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3287

Testcase 3287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3288

Testcase 3288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3289

Testcase 3289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3290

Testcase 3290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3291

Testcase 3291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3292

Testcase 3292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3293

Testcase 3293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3294

Testcase 3294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3295

Testcase 3295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3296

Testcase 3296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3297

Testcase 3297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3298

Testcase 3298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3299

Testcase 3299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3300

Testcase 3300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3301

Testcase 3301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3302

Testcase 3302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3303

Testcase 3303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3304

Testcase 3304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3305

Testcase 3305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3306

Testcase 3306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3307

Testcase 3307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3308

Testcase 3308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3309

Testcase 3309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3310

Testcase 3310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3311

Testcase 3311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3312

Testcase 3312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3313

Testcase 3313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3314

Testcase 3314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3315

Testcase 3315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3316

Testcase 3316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3317

Testcase 3317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3318

Testcase 3318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3319

Testcase 3319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3320

Testcase 3320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3321

Testcase 3321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3322

Testcase 3322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3323

Testcase 3323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3324

Testcase 3324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3325

Testcase 3325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3326

Testcase 3326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3327

Testcase 3327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3328

Testcase 3328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc3329

Testcase 3329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3330

Testcase 3330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3331

Testcase 3331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3332

Testcase 3332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3333

Testcase 3333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3334

Testcase 3334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3335

Testcase 3335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3336

Testcase 3336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3337

Testcase 3337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3338

Testcase 3338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3339

Testcase 3339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3340

Testcase 3340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3341

Testcase 3341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3342

Testcase 3342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3343

Testcase 3343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3344

Testcase 3344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3345

Testcase 3345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3346

Testcase 3346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3347

Testcase 3347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3348

Testcase 3348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3349

Testcase 3349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3350

Testcase 3350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3351

Testcase 3351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3352

Testcase 3352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3353

Testcase 3353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3354

Testcase 3354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3355

Testcase 3355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3356

Testcase 3356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3357

Testcase 3357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3358

Testcase 3358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3359

Testcase 3359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3360

Testcase 3360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3361

Testcase 3361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3362

Testcase 3362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3363

Testcase 3363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3364

Testcase 3364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3365

Testcase 3365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3366

Testcase 3366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3367

Testcase 3367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3368

Testcase 3368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3369

Testcase 3369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3370

Testcase 3370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3371

Testcase 3371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3372

Testcase 3372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3373

Testcase 3373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3374

Testcase 3374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3375

Testcase 3375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3376

Testcase 3376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3377

Testcase 3377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3378

Testcase 3378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3379

Testcase 3379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3380

Testcase 3380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3381

Testcase 3381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3382

Testcase 3382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3383

Testcase 3383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3384

Testcase 3384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3385

Testcase 3385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3386

Testcase 3386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3387

Testcase 3387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3388

Testcase 3388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3389

Testcase 3389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3390

Testcase 3390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3391

Testcase 3391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3392

Testcase 3392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3393

Testcase 3393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3394

Testcase 3394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3395

Testcase 3395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3396

Testcase 3396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3397

Testcase 3397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3398

Testcase 3398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3399

Testcase 3399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3400

Testcase 3400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3401

Testcase 3401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3402

Testcase 3402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3403

Testcase 3403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3404

Testcase 3404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3405

Testcase 3405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3406

Testcase 3406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3407

Testcase 3407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3408

Testcase 3408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3409

Testcase 3409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc3410

Testcase 3410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3411

Testcase 3411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3412

Testcase 3412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3413

Testcase 3413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3414

Testcase 3414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3415

Testcase 3415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3416

Testcase 3416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3417

Testcase 3417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3418

Testcase 3418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3419

Testcase 3419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3420

Testcase 3420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3421

Testcase 3421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3422

Testcase 3422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3423

Testcase 3423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3424

Testcase 3424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3425

Testcase 3425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3426

Testcase 3426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3427

Testcase 3427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3428

Testcase 3428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3429

Testcase 3429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3430

Testcase 3430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3431

Testcase 3431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3432

Testcase 3432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3433

Testcase 3433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3434

Testcase 3434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3435

Testcase 3435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3436

Testcase 3436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3437

Testcase 3437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3438

Testcase 3438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3439

Testcase 3439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3440

Testcase 3440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3441

Testcase 3441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3442

Testcase 3442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3443

Testcase 3443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3444

Testcase 3444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3445

Testcase 3445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3446

Testcase 3446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3447

Testcase 3447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3448

Testcase 3448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3449

Testcase 3449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3450

Testcase 3450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3451

Testcase 3451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3452

Testcase 3452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3453

Testcase 3453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3454

Testcase 3454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3455

Testcase 3455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3456

Testcase 3456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3457

Testcase 3457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3458

Testcase 3458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3459

Testcase 3459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3460

Testcase 3460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3461

Testcase 3461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3462

Testcase 3462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3463

Testcase 3463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3464

Testcase 3464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3465

Testcase 3465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3466

Testcase 3466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3467

Testcase 3467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3468

Testcase 3468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3469

Testcase 3469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3470

Testcase 3470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3471

Testcase 3471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3472

Testcase 3472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3473

Testcase 3473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3474

Testcase 3474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3475

Testcase 3475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3476

Testcase 3476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3477

Testcase 3477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3478

Testcase 3478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3479

Testcase 3479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3480

Testcase 3480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3481

Testcase 3481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3482

Testcase 3482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3483

Testcase 3483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3484

Testcase 3484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3485

Testcase 3485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3486

Testcase 3486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3487

Testcase 3487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3488

Testcase 3488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3489

Testcase 3489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3490

Testcase 3490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:42+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc3491

Testcase 3491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3492

Testcase 3492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3493

Testcase 3493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3494

Testcase 3494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3495

Testcase 3495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3496

Testcase 3496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3497

Testcase 3497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3498

Testcase 3498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3499

Testcase 3499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3500

Testcase 3500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3501

Testcase 3501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3502

Testcase 3502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3503

Testcase 3503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3504

Testcase 3504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3505

Testcase 3505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3506

Testcase 3506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3507

Testcase 3507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3508

Testcase 3508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3509

Testcase 3509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3510

Testcase 3510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3511

Testcase 3511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3512

Testcase 3512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3513

Testcase 3513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3514

Testcase 3514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3515

Testcase 3515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3516

Testcase 3516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3517

Testcase 3517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3518

Testcase 3518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3519

Testcase 3519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3520

Testcase 3520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3521

Testcase 3521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3522

Testcase 3522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3523

Testcase 3523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3524

Testcase 3524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3525

Testcase 3525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3526

Testcase 3526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3527

Testcase 3527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3528

Testcase 3528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3529

Testcase 3529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3530

Testcase 3530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3531

Testcase 3531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3532

Testcase 3532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3533

Testcase 3533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3534

Testcase 3534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3535

Testcase 3535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3536

Testcase 3536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3537

Testcase 3537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3538

Testcase 3538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3539

Testcase 3539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3540

Testcase 3540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3541

Testcase 3541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3542

Testcase 3542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3543

Testcase 3543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3544

Testcase 3544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3545

Testcase 3545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3546

Testcase 3546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3547

Testcase 3547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3548

Testcase 3548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3549

Testcase 3549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3550

Testcase 3550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3551

Testcase 3551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3552

Testcase 3552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3553

Testcase 3553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3554

Testcase 3554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3555

Testcase 3555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3556

Testcase 3556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3557

Testcase 3557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3558

Testcase 3558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3559

Testcase 3559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3560

Testcase 3560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3561

Testcase 3561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3562

Testcase 3562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3563

Testcase 3563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3564

Testcase 3564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3565

Testcase 3565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3566

Testcase 3566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3567

Testcase 3567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3568

Testcase 3568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3569

Testcase 3569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3570

Testcase 3570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3571

Testcase 3571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc3572

Testcase 3572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3573

Testcase 3573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3574

Testcase 3574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3575

Testcase 3575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3576

Testcase 3576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3577

Testcase 3577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3578

Testcase 3578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3579

Testcase 3579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3580

Testcase 3580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3581

Testcase 3581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3582

Testcase 3582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3583

Testcase 3583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3584

Testcase 3584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3585

Testcase 3585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3586

Testcase 3586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3587

Testcase 3587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3588

Testcase 3588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3589

Testcase 3589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3590

Testcase 3590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3591

Testcase 3591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3592

Testcase 3592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3593

Testcase 3593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3594

Testcase 3594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3595

Testcase 3595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3596

Testcase 3596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3597

Testcase 3597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3598

Testcase 3598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3599

Testcase 3599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3600

Testcase 3600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3601

Testcase 3601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3602

Testcase 3602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3603

Testcase 3603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3604

Testcase 3604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3605

Testcase 3605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3606

Testcase 3606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3607

Testcase 3607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3608

Testcase 3608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3609

Testcase 3609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3610

Testcase 3610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3611

Testcase 3611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3612

Testcase 3612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3613

Testcase 3613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3614

Testcase 3614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3615

Testcase 3615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3616

Testcase 3616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3617

Testcase 3617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3618

Testcase 3618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3619

Testcase 3619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3620

Testcase 3620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3621

Testcase 3621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3622

Testcase 3622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3623

Testcase 3623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3624

Testcase 3624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3625

Testcase 3625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3626

Testcase 3626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3627

Testcase 3627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3628

Testcase 3628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3629

Testcase 3629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3630

Testcase 3630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3631

Testcase 3631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3632

Testcase 3632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3633

Testcase 3633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3634

Testcase 3634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3635

Testcase 3635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3636

Testcase 3636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3637

Testcase 3637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3638

Testcase 3638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3639

Testcase 3639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3640

Testcase 3640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3641

Testcase 3641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3642

Testcase 3642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3643

Testcase 3643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3644

Testcase 3644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3645

Testcase 3645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3646

Testcase 3646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3647

Testcase 3647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3648

Testcase 3648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3649

Testcase 3649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3650

Testcase 3650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3651

Testcase 3651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3652

Testcase 3652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc3653

Testcase 3653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3654

Testcase 3654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3655

Testcase 3655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3656

Testcase 3656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3657

Testcase 3657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3658

Testcase 3658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3659

Testcase 3659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3660

Testcase 3660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3661

Testcase 3661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3662

Testcase 3662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3663

Testcase 3663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3664

Testcase 3664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3665

Testcase 3665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3666

Testcase 3666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3667

Testcase 3667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3668

Testcase 3668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3669

Testcase 3669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3670

Testcase 3670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3671

Testcase 3671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3672

Testcase 3672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3673

Testcase 3673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3674

Testcase 3674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3675

Testcase 3675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3676

Testcase 3676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3677

Testcase 3677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3678

Testcase 3678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3679

Testcase 3679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3680

Testcase 3680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3681

Testcase 3681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3682

Testcase 3682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3683

Testcase 3683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3684

Testcase 3684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3685

Testcase 3685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3686

Testcase 3686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3687

Testcase 3687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3688

Testcase 3688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3689

Testcase 3689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3690

Testcase 3690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3691

Testcase 3691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3692

Testcase 3692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3693

Testcase 3693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3694

Testcase 3694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3695

Testcase 3695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3696

Testcase 3696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3697

Testcase 3697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3698

Testcase 3698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3699

Testcase 3699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3700

Testcase 3700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3701

Testcase 3701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3702

Testcase 3702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3703

Testcase 3703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3704

Testcase 3704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3705

Testcase 3705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3706

Testcase 3706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3707

Testcase 3707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3708

Testcase 3708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3709

Testcase 3709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3710

Testcase 3710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3711

Testcase 3711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3712

Testcase 3712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3713

Testcase 3713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3714

Testcase 3714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3715

Testcase 3715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3716

Testcase 3716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3717

Testcase 3717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3718

Testcase 3718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3719

Testcase 3719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3720

Testcase 3720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3721

Testcase 3721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3722

Testcase 3722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3723

Testcase 3723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3724

Testcase 3724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3725

Testcase 3725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3726

Testcase 3726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3727

Testcase 3727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3728

Testcase 3728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3729

Testcase 3729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3730

Testcase 3730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3731

Testcase 3731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3732

Testcase 3732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3733

Testcase 3733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc3734

Testcase 3734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3735

Testcase 3735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3736

Testcase 3736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3737

Testcase 3737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3738

Testcase 3738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3739

Testcase 3739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3740

Testcase 3740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3741

Testcase 3741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3742

Testcase 3742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3743

Testcase 3743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3744

Testcase 3744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3745

Testcase 3745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3746

Testcase 3746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3747

Testcase 3747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3748

Testcase 3748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3749

Testcase 3749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3750

Testcase 3750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3751

Testcase 3751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3752

Testcase 3752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3753

Testcase 3753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3754

Testcase 3754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3755

Testcase 3755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3756

Testcase 3756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3757

Testcase 3757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3758

Testcase 3758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3759

Testcase 3759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3760

Testcase 3760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3761

Testcase 3761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3762

Testcase 3762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3763

Testcase 3763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3764

Testcase 3764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3765

Testcase 3765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3766

Testcase 3766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3767

Testcase 3767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3768

Testcase 3768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3769

Testcase 3769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3770

Testcase 3770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3771

Testcase 3771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3772

Testcase 3772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3773

Testcase 3773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3774

Testcase 3774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3775

Testcase 3775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3776

Testcase 3776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3777

Testcase 3777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3778

Testcase 3778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3779

Testcase 3779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3780

Testcase 3780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3781

Testcase 3781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3782

Testcase 3782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3783

Testcase 3783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3784

Testcase 3784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3785

Testcase 3785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3786

Testcase 3786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3787

Testcase 3787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3788

Testcase 3788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3789

Testcase 3789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3790

Testcase 3790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3791

Testcase 3791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3792

Testcase 3792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3793

Testcase 3793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3794

Testcase 3794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3795

Testcase 3795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3796

Testcase 3796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3797

Testcase 3797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3798

Testcase 3798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3799

Testcase 3799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3800

Testcase 3800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3801

Testcase 3801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3802

Testcase 3802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3803

Testcase 3803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3804

Testcase 3804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3805

Testcase 3805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3806

Testcase 3806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3807

Testcase 3807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3808

Testcase 3808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3809

Testcase 3809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3810

Testcase 3810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3811

Testcase 3811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3812

Testcase 3812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3813

Testcase 3813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3814

Testcase 3814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc3815

Testcase 3815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3816

Testcase 3816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3817

Testcase 3817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3818

Testcase 3818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3819

Testcase 3819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3820

Testcase 3820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3821

Testcase 3821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3822

Testcase 3822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3823

Testcase 3823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3824

Testcase 3824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3825

Testcase 3825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3826

Testcase 3826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3827

Testcase 3827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3828

Testcase 3828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3829

Testcase 3829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3830

Testcase 3830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3831

Testcase 3831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3832

Testcase 3832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3833

Testcase 3833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3834

Testcase 3834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3835

Testcase 3835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3836

Testcase 3836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3837

Testcase 3837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3838

Testcase 3838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3839

Testcase 3839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3840

Testcase 3840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3841

Testcase 3841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3842

Testcase 3842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3843

Testcase 3843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3844

Testcase 3844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3845

Testcase 3845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3846

Testcase 3846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3847

Testcase 3847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3848

Testcase 3848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3849

Testcase 3849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3850

Testcase 3850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3851

Testcase 3851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3852

Testcase 3852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3853

Testcase 3853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3854

Testcase 3854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3855

Testcase 3855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3856

Testcase 3856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3857

Testcase 3857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3858

Testcase 3858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3859

Testcase 3859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3860

Testcase 3860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3861

Testcase 3861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3862

Testcase 3862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3863

Testcase 3863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3864

Testcase 3864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3865

Testcase 3865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3866

Testcase 3866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3867

Testcase 3867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3868

Testcase 3868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3869

Testcase 3869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3870

Testcase 3870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3871

Testcase 3871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3872

Testcase 3872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3873

Testcase 3873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3874

Testcase 3874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3875

Testcase 3875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3876

Testcase 3876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3877

Testcase 3877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3878

Testcase 3878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3879

Testcase 3879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3880

Testcase 3880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3881

Testcase 3881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3882

Testcase 3882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3883

Testcase 3883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3884

Testcase 3884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3885

Testcase 3885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3886

Testcase 3886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3887

Testcase 3887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3888

Testcase 3888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3889

Testcase 3889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3890

Testcase 3890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3891

Testcase 3891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3892

Testcase 3892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3893

Testcase 3893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3894

Testcase 3894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3895

Testcase 3895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc3896

Testcase 3896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3897

Testcase 3897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3898

Testcase 3898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3899

Testcase 3899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3900

Testcase 3900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3901

Testcase 3901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3902

Testcase 3902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3903

Testcase 3903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3904

Testcase 3904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3905

Testcase 3905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3906

Testcase 3906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3907

Testcase 3907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3908

Testcase 3908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3909

Testcase 3909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3910

Testcase 3910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3911

Testcase 3911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3912

Testcase 3912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3913

Testcase 3913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3914

Testcase 3914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3915

Testcase 3915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3916

Testcase 3916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3917

Testcase 3917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3918

Testcase 3918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3919

Testcase 3919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3920

Testcase 3920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3921

Testcase 3921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3922

Testcase 3922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3923

Testcase 3923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3924

Testcase 3924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3925

Testcase 3925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3926

Testcase 3926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3927

Testcase 3927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3928

Testcase 3928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3929

Testcase 3929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3930

Testcase 3930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3931

Testcase 3931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3932

Testcase 3932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3933

Testcase 3933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3934

Testcase 3934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3935

Testcase 3935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3936

Testcase 3936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3937

Testcase 3937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3938

Testcase 3938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3939

Testcase 3939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3940

Testcase 3940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3941

Testcase 3941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3942

Testcase 3942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3943

Testcase 3943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3944

Testcase 3944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3945

Testcase 3945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3946

Testcase 3946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3947

Testcase 3947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3948

Testcase 3948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3949

Testcase 3949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3950

Testcase 3950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3951

Testcase 3951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3952

Testcase 3952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3953

Testcase 3953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3954

Testcase 3954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3955

Testcase 3955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3956

Testcase 3956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3957

Testcase 3957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3958

Testcase 3958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3959

Testcase 3959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3960

Testcase 3960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3961

Testcase 3961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3962

Testcase 3962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3963

Testcase 3963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3964

Testcase 3964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3965

Testcase 3965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3966

Testcase 3966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3967

Testcase 3967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3968

Testcase 3968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3969

Testcase 3969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3970

Testcase 3970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3971

Testcase 3971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3972

Testcase 3972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3973

Testcase 3973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3974

Testcase 3974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3975

Testcase 3975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3976

Testcase 3976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc3977

Testcase 3977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3978

Testcase 3978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3979

Testcase 3979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3980

Testcase 3980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3981

Testcase 3981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3982

Testcase 3982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3983

Testcase 3983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3984

Testcase 3984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3985

Testcase 3985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3986

Testcase 3986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3987

Testcase 3987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3988

Testcase 3988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3989

Testcase 3989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3990

Testcase 3990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3991

Testcase 3991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3992

Testcase 3992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3993

Testcase 3993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc3994

Testcase 3994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3995

Testcase 3995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3996

Testcase 3996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3997

Testcase 3997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3998

Testcase 3998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc3999

Testcase 3999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4000

Testcase 4000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4001

Testcase 4001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4002

Testcase 4002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4003

Testcase 4003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4004

Testcase 4004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4005

Testcase 4005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4006

Testcase 4006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4007

Testcase 4007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4008

Testcase 4008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4009

Testcase 4009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4010

Testcase 4010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4011

Testcase 4011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4012

Testcase 4012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4013

Testcase 4013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4014

Testcase 4014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4015

Testcase 4015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4016

Testcase 4016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4017

Testcase 4017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4018

Testcase 4018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4019

Testcase 4019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4020

Testcase 4020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4021

Testcase 4021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4022

Testcase 4022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4023

Testcase 4023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4024

Testcase 4024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4025

Testcase 4025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4026

Testcase 4026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4027

Testcase 4027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4028

Testcase 4028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4029

Testcase 4029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4030

Testcase 4030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4031

Testcase 4031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4032

Testcase 4032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4033

Testcase 4033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4034

Testcase 4034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4035

Testcase 4035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4036

Testcase 4036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4037

Testcase 4037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4038

Testcase 4038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4039

Testcase 4039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4040

Testcase 4040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4041

Testcase 4041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4042

Testcase 4042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4043

Testcase 4043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4044

Testcase 4044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4045

Testcase 4045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4046

Testcase 4046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4047

Testcase 4047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4048

Testcase 4048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4049

Testcase 4049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4050

Testcase 4050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4051

Testcase 4051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4052

Testcase 4052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4053

Testcase 4053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4054

Testcase 4054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4055

Testcase 4055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4056

Testcase 4056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4057

Testcase 4057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::nameconstraints::tc4058

Testcase 4058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4059

Testcase 4059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4060

Testcase 4060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4061

Testcase 4061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4062

Testcase 4062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4063

Testcase 4063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4064

Testcase 4064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4065

Testcase 4065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4066

Testcase 4066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4067

Testcase 4067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4068

Testcase 4068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4069

Testcase 4069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4070

Testcase 4070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4071

Testcase 4071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4072

Testcase 4072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4073

Testcase 4073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4074

Testcase 4074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4075

Testcase 4075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4076

Testcase 4076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4077

Testcase 4077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4078

Testcase 4078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4079

Testcase 4079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4080

Testcase 4080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4081

Testcase 4081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4082

Testcase 4082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4083

Testcase 4083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4084

Testcase 4084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4085

Testcase 4085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4086

Testcase 4086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4087

Testcase 4087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4088

Testcase 4088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4089

Testcase 4089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4090

Testcase 4090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4091

Testcase 4091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4092

Testcase 4092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4093

Testcase 4093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4094

Testcase 4094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4095

Testcase 4095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4096

Testcase 4096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4097

Testcase 4097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4098

Testcase 4098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4099

Testcase 4099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4100

Testcase 4100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4101

Testcase 4101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4102

Testcase 4102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4103

Testcase 4103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4104

Testcase 4104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4105

Testcase 4105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4106

Testcase 4106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4107

Testcase 4107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4108

Testcase 4108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4109

Testcase 4109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4110

Testcase 4110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4111

Testcase 4111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4112

Testcase 4112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4113

Testcase 4113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4114

Testcase 4114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4115

Testcase 4115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4116

Testcase 4116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4117

Testcase 4117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4118

Testcase 4118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4119

Testcase 4119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4120

Testcase 4120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4121

Testcase 4121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4122

Testcase 4122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4123

Testcase 4123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4124

Testcase 4124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4125

Testcase 4125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4126

Testcase 4126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4127

Testcase 4127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4128

Testcase 4128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4129

Testcase 4129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4130

Testcase 4130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4131

Testcase 4131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4132

Testcase 4132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4133

Testcase 4133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4134

Testcase 4134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4135

Testcase 4135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4136

Testcase 4136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4137

Testcase 4137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4138

Testcase 4138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc4139

Testcase 4139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4140

Testcase 4140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4141

Testcase 4141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4142

Testcase 4142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4143

Testcase 4143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4144

Testcase 4144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4145

Testcase 4145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4146

Testcase 4146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4147

Testcase 4147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4148

Testcase 4148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4149

Testcase 4149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4150

Testcase 4150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4151

Testcase 4151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4152

Testcase 4152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4153

Testcase 4153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4154

Testcase 4154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4155

Testcase 4155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4156

Testcase 4156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4157

Testcase 4157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4158

Testcase 4158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4159

Testcase 4159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4160

Testcase 4160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4161

Testcase 4161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4162

Testcase 4162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4163

Testcase 4163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4164

Testcase 4164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4165

Testcase 4165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4166

Testcase 4166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4167

Testcase 4167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4168

Testcase 4168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4169

Testcase 4169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4170

Testcase 4170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4171

Testcase 4171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4172

Testcase 4172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4173

Testcase 4173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4174

Testcase 4174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4175

Testcase 4175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4176

Testcase 4176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4177

Testcase 4177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4178

Testcase 4178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4179

Testcase 4179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4180

Testcase 4180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4181

Testcase 4181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4182

Testcase 4182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4183

Testcase 4183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4184

Testcase 4184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4185

Testcase 4185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4186

Testcase 4186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4187

Testcase 4187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4188

Testcase 4188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4189

Testcase 4189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4190

Testcase 4190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4191

Testcase 4191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4192

Testcase 4192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4193

Testcase 4193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4194

Testcase 4194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4195

Testcase 4195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4196

Testcase 4196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4197

Testcase 4197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4198

Testcase 4198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4199

Testcase 4199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4200

Testcase 4200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4201

Testcase 4201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4202

Testcase 4202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4203

Testcase 4203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4204

Testcase 4204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4205

Testcase 4205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4206

Testcase 4206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4207

Testcase 4207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4208

Testcase 4208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4209

Testcase 4209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4210

Testcase 4210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4211

Testcase 4211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4212

Testcase 4212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4213

Testcase 4213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4214

Testcase 4214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4215

Testcase 4215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4216

Testcase 4216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4217

Testcase 4217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4218

Testcase 4218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4219

Testcase 4219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc4220

Testcase 4220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4221

Testcase 4221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4222

Testcase 4222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4223

Testcase 4223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4224

Testcase 4224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4225

Testcase 4225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4226

Testcase 4226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4227

Testcase 4227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4228

Testcase 4228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4229

Testcase 4229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4230

Testcase 4230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4231

Testcase 4231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4232

Testcase 4232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4233

Testcase 4233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4234

Testcase 4234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4235

Testcase 4235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4236

Testcase 4236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4237

Testcase 4237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4238

Testcase 4238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4239

Testcase 4239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4240

Testcase 4240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4241

Testcase 4241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4242

Testcase 4242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4243

Testcase 4243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4244

Testcase 4244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4245

Testcase 4245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4246

Testcase 4246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4247

Testcase 4247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4248

Testcase 4248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4249

Testcase 4249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4250

Testcase 4250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4251

Testcase 4251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4252

Testcase 4252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4253

Testcase 4253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4254

Testcase 4254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4255

Testcase 4255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4256

Testcase 4256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4257

Testcase 4257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4258

Testcase 4258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4259

Testcase 4259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4260

Testcase 4260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4261

Testcase 4261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4262

Testcase 4262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4263

Testcase 4263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4264

Testcase 4264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4265

Testcase 4265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4266

Testcase 4266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4267

Testcase 4267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4268

Testcase 4268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4269

Testcase 4269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4270

Testcase 4270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4271

Testcase 4271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4272

Testcase 4272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4273

Testcase 4273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4274

Testcase 4274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4275

Testcase 4275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4276

Testcase 4276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4277

Testcase 4277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4278

Testcase 4278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4279

Testcase 4279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4280

Testcase 4280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4281

Testcase 4281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4282

Testcase 4282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4283

Testcase 4283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4284

Testcase 4284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4285

Testcase 4285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4286

Testcase 4286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4287

Testcase 4287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4288

Testcase 4288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4289

Testcase 4289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4290

Testcase 4290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4291

Testcase 4291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4292

Testcase 4292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4293

Testcase 4293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4294

Testcase 4294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4295

Testcase 4295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4296

Testcase 4296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4297

Testcase 4297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4298

Testcase 4298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4299

Testcase 4299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4300

Testcase 4300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for test.localhost. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	DNS name validation failed

bettertls::nameconstraints::tc4301

Testcase 4301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4302

Testcase 4302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4303

Testcase 4303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4304

Testcase 4304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4305

Testcase 4305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4306

Testcase 4306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4307

Testcase 4307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4308

Testcase 4308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4309

Testcase 4309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4310

Testcase 4310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4311

Testcase 4311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4312

Testcase 4312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4313

Testcase 4313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4314

Testcase 4314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4315

Testcase 4315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4316

Testcase 4316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4317

Testcase 4317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4318

Testcase 4318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4319

Testcase 4319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4320

Testcase 4320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4321

Testcase 4321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4322

Testcase 4322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4323

Testcase 4323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4324

Testcase 4324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4325

Testcase 4325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4326

Testcase 4326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4327

Testcase 4327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4328

Testcase 4328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4329

Testcase 4329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4330

Testcase 4330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4331

Testcase 4331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4332

Testcase 4332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4333

Testcase 4333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4334

Testcase 4334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4335

Testcase 4335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4336

Testcase 4336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4337

Testcase 4337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4338

Testcase 4338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4339

Testcase 4339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4340

Testcase 4340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4341

Testcase 4341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4342

Testcase 4342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4343

Testcase 4343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4344

Testcase 4344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4345

Testcase 4345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4346

Testcase 4346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4347

Testcase 4347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4348

Testcase 4348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4349

Testcase 4349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4350

Testcase 4350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4351

Testcase 4351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4352

Testcase 4352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4353

Testcase 4353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4354

Testcase 4354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4355

Testcase 4355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4356

Testcase 4356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4357

Testcase 4357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4358

Testcase 4358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4359

Testcase 4359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4360

Testcase 4360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4361

Testcase 4361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4362

Testcase 4362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4363

Testcase 4363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4364

Testcase 4364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4365

Testcase 4365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4366

Testcase 4366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4367

Testcase 4367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4368

Testcase 4368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4369

Testcase 4369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4370

Testcase 4370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4371

Testcase 4371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4372

Testcase 4372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4373

Testcase 4373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4374

Testcase 4374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4375

Testcase 4375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4376

Testcase 4376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4377

Testcase 4377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4378

Testcase 4378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4379

Testcase 4379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4380

Testcase 4380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4381

Testcase 4381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc4382

Testcase 4382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4383

Testcase 4383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4384

Testcase 4384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4385

Testcase 4385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4386

Testcase 4386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4387

Testcase 4387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4388

Testcase 4388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4389

Testcase 4389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4390

Testcase 4390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4391

Testcase 4391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4392

Testcase 4392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4393

Testcase 4393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4394

Testcase 4394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4395

Testcase 4395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4396

Testcase 4396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4397

Testcase 4397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4398

Testcase 4398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4399

Testcase 4399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4400

Testcase 4400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4401

Testcase 4401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4402

Testcase 4402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4403

Testcase 4403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4404

Testcase 4404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4405

Testcase 4405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4406

Testcase 4406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4407

Testcase 4407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4408

Testcase 4408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4409

Testcase 4409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4410

Testcase 4410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4411

Testcase 4411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4412

Testcase 4412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4413

Testcase 4413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4414

Testcase 4414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4415

Testcase 4415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4416

Testcase 4416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4417

Testcase 4417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4418

Testcase 4418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4419

Testcase 4419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4420

Testcase 4420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4421

Testcase 4421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4422

Testcase 4422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4423

Testcase 4423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4424

Testcase 4424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4425

Testcase 4425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4426

Testcase 4426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4427

Testcase 4427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4428

Testcase 4428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4429

Testcase 4429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4430

Testcase 4430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4431

Testcase 4431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4432

Testcase 4432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4433

Testcase 4433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4434

Testcase 4434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4435

Testcase 4435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4436

Testcase 4436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4437

Testcase 4437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4438

Testcase 4438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4439

Testcase 4439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4440

Testcase 4440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4441

Testcase 4441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4442

Testcase 4442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4443

Testcase 4443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4444

Testcase 4444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4445

Testcase 4445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4446

Testcase 4446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4447

Testcase 4447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4448

Testcase 4448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4449

Testcase 4449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4450

Testcase 4450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4451

Testcase 4451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4452

Testcase 4452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4453

Testcase 4453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4454

Testcase 4454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4455

Testcase 4455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4456

Testcase 4456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4457

Testcase 4457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4458

Testcase 4458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4459

Testcase 4459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4460

Testcase 4460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4461

Testcase 4461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4462

Testcase 4462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc4463

Testcase 4463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4464

Testcase 4464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4465

Testcase 4465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4466

Testcase 4466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4467

Testcase 4467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4468

Testcase 4468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4469

Testcase 4469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4470

Testcase 4470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4471

Testcase 4471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4472

Testcase 4472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4473

Testcase 4473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4474

Testcase 4474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4475

Testcase 4475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4476

Testcase 4476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4477

Testcase 4477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4478

Testcase 4478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4479

Testcase 4479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4480

Testcase 4480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4481

Testcase 4481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4482

Testcase 4482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4483

Testcase 4483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4484

Testcase 4484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4485

Testcase 4485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4486

Testcase 4486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4487

Testcase 4487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4488

Testcase 4488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4489

Testcase 4489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4490

Testcase 4490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4491

Testcase 4491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4492

Testcase 4492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4493

Testcase 4493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4494

Testcase 4494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4495

Testcase 4495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4496

Testcase 4496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4497

Testcase 4497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4498

Testcase 4498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4499

Testcase 4499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4500

Testcase 4500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4501

Testcase 4501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4502

Testcase 4502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4503

Testcase 4503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4504

Testcase 4504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4505

Testcase 4505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4506

Testcase 4506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4507

Testcase 4507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4508

Testcase 4508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4509

Testcase 4509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4510

Testcase 4510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4511

Testcase 4511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4512

Testcase 4512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4513

Testcase 4513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4514

Testcase 4514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4515

Testcase 4515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4516

Testcase 4516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4517

Testcase 4517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4518

Testcase 4518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4519

Testcase 4519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4520

Testcase 4520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4521

Testcase 4521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4522

Testcase 4522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4523

Testcase 4523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4524

Testcase 4524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4525

Testcase 4525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4526

Testcase 4526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4527

Testcase 4527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4528

Testcase 4528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4529

Testcase 4529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4530

Testcase 4530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4531

Testcase 4531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4532

Testcase 4532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4533

Testcase 4533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4534

Testcase 4534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4535

Testcase 4535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4536

Testcase 4536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4537

Testcase 4537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4538

Testcase 4538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4539

Testcase 4539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4540

Testcase 4540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4541

Testcase 4541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4542

Testcase 4542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4543

Testcase 4543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc4544

Testcase 4544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4545

Testcase 4545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4546

Testcase 4546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4547

Testcase 4547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4548

Testcase 4548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4549

Testcase 4549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4550

Testcase 4550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4551

Testcase 4551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4552

Testcase 4552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4553

Testcase 4553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4554

Testcase 4554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4555

Testcase 4555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4556

Testcase 4556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4557

Testcase 4557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4558

Testcase 4558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4559

Testcase 4559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4560

Testcase 4560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4561

Testcase 4561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4562

Testcase 4562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4563

Testcase 4563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4564

Testcase 4564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4565

Testcase 4565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4566

Testcase 4566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4567

Testcase 4567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4568

Testcase 4568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4569

Testcase 4569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4570

Testcase 4570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4571

Testcase 4571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4572

Testcase 4572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4573

Testcase 4573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4574

Testcase 4574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4575

Testcase 4575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4576

Testcase 4576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4577

Testcase 4577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4578

Testcase 4578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4579

Testcase 4579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4580

Testcase 4580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4581

Testcase 4581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4582

Testcase 4582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4583

Testcase 4583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4584

Testcase 4584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4585

Testcase 4585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4586

Testcase 4586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4587

Testcase 4587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4588

Testcase 4588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4589

Testcase 4589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4590

Testcase 4590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4591

Testcase 4591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4592

Testcase 4592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4593

Testcase 4593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4594

Testcase 4594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4595

Testcase 4595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4596

Testcase 4596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4597

Testcase 4597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4598

Testcase 4598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4599

Testcase 4599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4600

Testcase 4600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4601

Testcase 4601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4602

Testcase 4602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4603

Testcase 4603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4604

Testcase 4604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4605

Testcase 4605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4606

Testcase 4606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4607

Testcase 4607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4608

Testcase 4608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4609

Testcase 4609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4610

Testcase 4610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4611

Testcase 4611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4612

Testcase 4612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4613

Testcase 4613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4614

Testcase 4614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4615

Testcase 4615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4616

Testcase 4616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4617

Testcase 4617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4618

Testcase 4618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4619

Testcase 4619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4620

Testcase 4620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4621

Testcase 4621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4622

Testcase 4622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4623

Testcase 4623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4624

Testcase 4624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc4625

Testcase 4625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4626

Testcase 4626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4627

Testcase 4627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4628

Testcase 4628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4629

Testcase 4629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4630

Testcase 4630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4631

Testcase 4631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4632

Testcase 4632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4633

Testcase 4633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4634

Testcase 4634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4635

Testcase 4635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4636

Testcase 4636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4637

Testcase 4637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4638

Testcase 4638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4639

Testcase 4639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4640

Testcase 4640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4641

Testcase 4641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4642

Testcase 4642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4643

Testcase 4643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4644

Testcase 4644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4645

Testcase 4645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4646

Testcase 4646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4647

Testcase 4647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4648

Testcase 4648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4649

Testcase 4649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4650

Testcase 4650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4651

Testcase 4651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4652

Testcase 4652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4653

Testcase 4653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4654

Testcase 4654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4655

Testcase 4655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4656

Testcase 4656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4657

Testcase 4657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4658

Testcase 4658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4659

Testcase 4659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4660

Testcase 4660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4661

Testcase 4661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4662

Testcase 4662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4663

Testcase 4663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4664

Testcase 4664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4665

Testcase 4665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4666

Testcase 4666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4667

Testcase 4667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4668

Testcase 4668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4669

Testcase 4669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4670

Testcase 4670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4671

Testcase 4671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4672

Testcase 4672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4673

Testcase 4673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4674

Testcase 4674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4675

Testcase 4675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4676

Testcase 4676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4677

Testcase 4677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4678

Testcase 4678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4679

Testcase 4679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4680

Testcase 4680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4681

Testcase 4681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4682

Testcase 4682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4683

Testcase 4683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4684

Testcase 4684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4685

Testcase 4685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4686

Testcase 4686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4687

Testcase 4687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4688

Testcase 4688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4689

Testcase 4689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4690

Testcase 4690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4691

Testcase 4691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4692

Testcase 4692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4693

Testcase 4693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4694

Testcase 4694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4695

Testcase 4695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4696

Testcase 4696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4697

Testcase 4697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4698

Testcase 4698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4699

Testcase 4699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4700

Testcase 4700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4701

Testcase 4701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4702

Testcase 4702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4703

Testcase 4703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4704

Testcase 4704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4705

Testcase 4705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc4706

Testcase 4706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4707

Testcase 4707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4708

Testcase 4708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4709

Testcase 4709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4710

Testcase 4710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4711

Testcase 4711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4712

Testcase 4712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4713

Testcase 4713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4714

Testcase 4714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4715

Testcase 4715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4716

Testcase 4716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4717

Testcase 4717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4718

Testcase 4718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4719

Testcase 4719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4720

Testcase 4720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4721

Testcase 4721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4722

Testcase 4722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4723

Testcase 4723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4724

Testcase 4724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4725

Testcase 4725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4726

Testcase 4726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4727

Testcase 4727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4728

Testcase 4728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4729

Testcase 4729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4730

Testcase 4730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4731

Testcase 4731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4732

Testcase 4732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4733

Testcase 4733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4734

Testcase 4734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4735

Testcase 4735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4736

Testcase 4736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4737

Testcase 4737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4738

Testcase 4738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4739

Testcase 4739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4740

Testcase 4740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4741

Testcase 4741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4742

Testcase 4742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4743

Testcase 4743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4744

Testcase 4744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4745

Testcase 4745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4746

Testcase 4746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4747

Testcase 4747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4748

Testcase 4748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4749

Testcase 4749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4750

Testcase 4750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4751

Testcase 4751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4752

Testcase 4752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4753

Testcase 4753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4754

Testcase 4754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4755

Testcase 4755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4756

Testcase 4756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4757

Testcase 4757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4758

Testcase 4758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4759

Testcase 4759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4760

Testcase 4760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4761

Testcase 4761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4762

Testcase 4762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4763

Testcase 4763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4764

Testcase 4764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4765

Testcase 4765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4766

Testcase 4766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4767

Testcase 4767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4768

Testcase 4768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4769

Testcase 4769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4770

Testcase 4770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4771

Testcase 4771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4772

Testcase 4772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4773

Testcase 4773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4774

Testcase 4774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4775

Testcase 4775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4776

Testcase 4776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4777

Testcase 4777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4778

Testcase 4778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4779

Testcase 4779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4780

Testcase 4780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4781

Testcase 4781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4782

Testcase 4782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4783

Testcase 4783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4784

Testcase 4784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4785

Testcase 4785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4786

Testcase 4786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc4787

Testcase 4787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4788

Testcase 4788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4789

Testcase 4789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4790

Testcase 4790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4791

Testcase 4791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4792

Testcase 4792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4793

Testcase 4793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4794

Testcase 4794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4795

Testcase 4795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4796

Testcase 4796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4797

Testcase 4797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4798

Testcase 4798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4799

Testcase 4799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4800

Testcase 4800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4801

Testcase 4801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4802

Testcase 4802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4803

Testcase 4803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4804

Testcase 4804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4805

Testcase 4805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4806

Testcase 4806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4807

Testcase 4807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4808

Testcase 4808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4809

Testcase 4809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4810

Testcase 4810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4811

Testcase 4811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4812

Testcase 4812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4813

Testcase 4813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4814

Testcase 4814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4815

Testcase 4815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4816

Testcase 4816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4817

Testcase 4817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4818

Testcase 4818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4819

Testcase 4819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4820

Testcase 4820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4821

Testcase 4821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4822

Testcase 4822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4823

Testcase 4823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4824

Testcase 4824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4825

Testcase 4825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4826

Testcase 4826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4827

Testcase 4827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4828

Testcase 4828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4829

Testcase 4829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4830

Testcase 4830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4831

Testcase 4831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4832

Testcase 4832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4833

Testcase 4833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4834

Testcase 4834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4835

Testcase 4835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4836

Testcase 4836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4837

Testcase 4837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4838

Testcase 4838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4839

Testcase 4839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4840

Testcase 4840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4841

Testcase 4841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4842

Testcase 4842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4843

Testcase 4843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4844

Testcase 4844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4845

Testcase 4845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4846

Testcase 4846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4847

Testcase 4847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4848

Testcase 4848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4849

Testcase 4849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4850

Testcase 4850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4851

Testcase 4851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4852

Testcase 4852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4853

Testcase 4853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4854

Testcase 4854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4855

Testcase 4855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4856

Testcase 4856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4857

Testcase 4857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4858

Testcase 4858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4859

Testcase 4859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4860

Testcase 4860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4861

Testcase 4861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4862

Testcase 4862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4863

Testcase 4863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4864

Testcase 4864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4865

Testcase 4865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4866

Testcase 4866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4867

Testcase 4867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc4868

Testcase 4868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4869

Testcase 4869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4870

Testcase 4870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4871

Testcase 4871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4872

Testcase 4872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4873

Testcase 4873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4874

Testcase 4874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4875

Testcase 4875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4876

Testcase 4876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4877

Testcase 4877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4878

Testcase 4878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4879

Testcase 4879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4880

Testcase 4880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4881

Testcase 4881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4882

Testcase 4882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4883

Testcase 4883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4884

Testcase 4884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4885

Testcase 4885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4886

Testcase 4886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4887

Testcase 4887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4888

Testcase 4888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4889

Testcase 4889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4890

Testcase 4890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4891

Testcase 4891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4892

Testcase 4892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4893

Testcase 4893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4894

Testcase 4894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4895

Testcase 4895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4896

Testcase 4896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4897

Testcase 4897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4898

Testcase 4898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4899

Testcase 4899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4900

Testcase 4900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4901

Testcase 4901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4902

Testcase 4902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4903

Testcase 4903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4904

Testcase 4904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4905

Testcase 4905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4906

Testcase 4906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4907

Testcase 4907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4908

Testcase 4908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4909

Testcase 4909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4910

Testcase 4910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4911

Testcase 4911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4912

Testcase 4912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4913

Testcase 4913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4914

Testcase 4914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4915

Testcase 4915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4916

Testcase 4916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4917

Testcase 4917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4918

Testcase 4918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4919

Testcase 4919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4920

Testcase 4920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4921

Testcase 4921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4922

Testcase 4922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4923

Testcase 4923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4924

Testcase 4924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4925

Testcase 4925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4926

Testcase 4926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4927

Testcase 4927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4928

Testcase 4928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4929

Testcase 4929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4930

Testcase 4930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4931

Testcase 4931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4932

Testcase 4932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4933

Testcase 4933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4934

Testcase 4934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4935

Testcase 4935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4936

Testcase 4936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4937

Testcase 4937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4938

Testcase 4938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4939

Testcase 4939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4940

Testcase 4940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4941

Testcase 4941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4942

Testcase 4942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4943

Testcase 4943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4944

Testcase 4944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4945

Testcase 4945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4946

Testcase 4946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4947

Testcase 4947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4948

Testcase 4948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc4949

Testcase 4949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4950

Testcase 4950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4951

Testcase 4951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4952

Testcase 4952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4953

Testcase 4953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4954

Testcase 4954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4955

Testcase 4955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4956

Testcase 4956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4957

Testcase 4957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4958

Testcase 4958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4959

Testcase 4959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4960

Testcase 4960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4961

Testcase 4961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4962

Testcase 4962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc4963

Testcase 4963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4964

Testcase 4964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4965

Testcase 4965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4966

Testcase 4966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4967

Testcase 4967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4968

Testcase 4968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4969

Testcase 4969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4970

Testcase 4970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4971

Testcase 4971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4972

Testcase 4972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4973

Testcase 4973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4974

Testcase 4974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4975

Testcase 4975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4976

Testcase 4976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4977

Testcase 4977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4978

Testcase 4978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4979

Testcase 4979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4980

Testcase 4980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4981

Testcase 4981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4982

Testcase 4982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4983

Testcase 4983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4984

Testcase 4984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4985

Testcase 4985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4986

Testcase 4986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4987

Testcase 4987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4988

Testcase 4988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4989

Testcase 4989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4990

Testcase 4990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4991

Testcase 4991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4992

Testcase 4992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4993

Testcase 4993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4994

Testcase 4994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4995

Testcase 4995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4996

Testcase 4996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4997

Testcase 4997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4998

Testcase 4998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc4999

Testcase 4999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5000

Testcase 5000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5001

Testcase 5001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5002

Testcase 5002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5003

Testcase 5003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5004

Testcase 5004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5005

Testcase 5005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5006

Testcase 5006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5007

Testcase 5007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5008

Testcase 5008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5009

Testcase 5009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5010

Testcase 5010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5011

Testcase 5011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5012

Testcase 5012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5013

Testcase 5013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5014

Testcase 5014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5015

Testcase 5015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5016

Testcase 5016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5017

Testcase 5017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5018

Testcase 5018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5019

Testcase 5019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5020

Testcase 5020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5021

Testcase 5021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5022

Testcase 5022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5023

Testcase 5023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5024

Testcase 5024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5025

Testcase 5025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5026

Testcase 5026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5027

Testcase 5027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5028

Testcase 5028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5029

Testcase 5029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5030

Testcase 5030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5031

Testcase 5031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5032

Testcase 5032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5033

Testcase 5033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5034

Testcase 5034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5035

Testcase 5035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5036

Testcase 5036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5037

Testcase 5037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5038

Testcase 5038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5039

Testcase 5039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5040

Testcase 5040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5041

Testcase 5041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5042

Testcase 5042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5043

Testcase 5043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5044

Testcase 5044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5045

Testcase 5045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5046

Testcase 5046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5047

Testcase 5047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5048

Testcase 5048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5049

Testcase 5049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5050

Testcase 5050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5051

Testcase 5051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5052

Testcase 5052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5053

Testcase 5053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5054

Testcase 5054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5055

Testcase 5055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5056

Testcase 5056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5057

Testcase 5057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5058

Testcase 5058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5059

Testcase 5059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5060

Testcase 5060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5061

Testcase 5061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5062

Testcase 5062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5063

Testcase 5063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5064

Testcase 5064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5065

Testcase 5065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5066

Testcase 5066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5067

Testcase 5067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5068

Testcase 5068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5069

Testcase 5069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5070

Testcase 5070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5071

Testcase 5071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5072

Testcase 5072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5073

Testcase 5073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5074

Testcase 5074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5075

Testcase 5075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5076

Testcase 5076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5077

Testcase 5077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5078

Testcase 5078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5079

Testcase 5079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5080

Testcase 5080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5081

Testcase 5081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5082

Testcase 5082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5083

Testcase 5083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5084

Testcase 5084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5085

Testcase 5085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5086

Testcase 5086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5087

Testcase 5087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5088

Testcase 5088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5089

Testcase 5089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5090

Testcase 5090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5091

Testcase 5091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5092

Testcase 5092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5093

Testcase 5093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5094

Testcase 5094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5095

Testcase 5095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5096

Testcase 5096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5097

Testcase 5097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5098

Testcase 5098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5099

Testcase 5099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5100

Testcase 5100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5101

Testcase 5101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5102

Testcase 5102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5103

Testcase 5103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5104

Testcase 5104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5105

Testcase 5105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5106

Testcase 5106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5107

Testcase 5107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5108

Testcase 5108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5109

Testcase 5109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5110

Testcase 5110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5111

Testcase 5111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5112

Testcase 5112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5113

Testcase 5113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5114

Testcase 5114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5115

Testcase 5115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5116

Testcase 5116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5117

Testcase 5117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5118

Testcase 5118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5119

Testcase 5119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5120

Testcase 5120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5121

Testcase 5121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5122

Testcase 5122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5123

Testcase 5123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5124

Testcase 5124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5125

Testcase 5125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5126

Testcase 5126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5127

Testcase 5127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5128

Testcase 5128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5129

Testcase 5129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5130

Testcase 5130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5131

Testcase 5131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5132

Testcase 5132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5133

Testcase 5133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5134

Testcase 5134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5135

Testcase 5135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5136

Testcase 5136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5137

Testcase 5137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5138

Testcase 5138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5139

Testcase 5139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5140

Testcase 5140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5141

Testcase 5141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5142

Testcase 5142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5143

Testcase 5143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5144

Testcase 5144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5145

Testcase 5145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5146

Testcase 5146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5147

Testcase 5147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5148

Testcase 5148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5149

Testcase 5149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5150

Testcase 5150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5151

Testcase 5151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5152

Testcase 5152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5153

Testcase 5153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5154

Testcase 5154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5155

Testcase 5155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5156

Testcase 5156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5157

Testcase 5157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5158

Testcase 5158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5159

Testcase 5159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5160

Testcase 5160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5161

Testcase 5161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5162

Testcase 5162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5163

Testcase 5163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5164

Testcase 5164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5165

Testcase 5165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5166

Testcase 5166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5167

Testcase 5167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5168

Testcase 5168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5169

Testcase 5169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5170

Testcase 5170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5171

Testcase 5171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5172

Testcase 5172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5173

Testcase 5173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5174

Testcase 5174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5175

Testcase 5175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5176

Testcase 5176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5177

Testcase 5177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5178

Testcase 5178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5179

Testcase 5179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5180

Testcase 5180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5181

Testcase 5181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5182

Testcase 5182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5183

Testcase 5183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5184

Testcase 5184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5185

Testcase 5185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5186

Testcase 5186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5187

Testcase 5187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5188

Testcase 5188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5189

Testcase 5189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5190

Testcase 5190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5191

Testcase 5191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5192

Testcase 5192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5193

Testcase 5193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5194

Testcase 5194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5195

Testcase 5195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5196

Testcase 5196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5197

Testcase 5197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5198

Testcase 5198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5199

Testcase 5199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5200

Testcase 5200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5201

Testcase 5201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5202

Testcase 5202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5203

Testcase 5203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5204

Testcase 5204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5205

Testcase 5205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5206

Testcase 5206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5207

Testcase 5207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5208

Testcase 5208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5209

Testcase 5209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5210

Testcase 5210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5211

Testcase 5211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5212

Testcase 5212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5213

Testcase 5213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5214

Testcase 5214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5215

Testcase 5215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5216

Testcase 5216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5217

Testcase 5217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5218

Testcase 5218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5219

Testcase 5219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5220

Testcase 5220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5221

Testcase 5221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5222

Testcase 5222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5223

Testcase 5223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5224

Testcase 5224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5225

Testcase 5225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5226

Testcase 5226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5227

Testcase 5227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5228

Testcase 5228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5229

Testcase 5229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5230

Testcase 5230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5231

Testcase 5231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5232

Testcase 5232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5233

Testcase 5233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5234

Testcase 5234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5235

Testcase 5235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5236

Testcase 5236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5237

Testcase 5237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5238

Testcase 5238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5239

Testcase 5239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5240

Testcase 5240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5241

Testcase 5241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5242

Testcase 5242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5243

Testcase 5243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5244

Testcase 5244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5245

Testcase 5245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5246

Testcase 5246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5247

Testcase 5247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5248

Testcase 5248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5249

Testcase 5249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5250

Testcase 5250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5251

Testcase 5251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5252

Testcase 5252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5253

Testcase 5253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5254

Testcase 5254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5255

Testcase 5255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5256

Testcase 5256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5257

Testcase 5257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5258

Testcase 5258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5259

Testcase 5259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5260

Testcase 5260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5261

Testcase 5261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5262

Testcase 5262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5263

Testcase 5263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5264

Testcase 5264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5265

Testcase 5265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5266

Testcase 5266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5267

Testcase 5267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5268

Testcase 5268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5269

Testcase 5269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5270

Testcase 5270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5271

Testcase 5271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5272

Testcase 5272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5273

Testcase 5273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5274

Testcase 5274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5275

Testcase 5275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5276

Testcase 5276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5277

Testcase 5277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5278

Testcase 5278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5279

Testcase 5279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5280

Testcase 5280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5281

Testcase 5281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5282

Testcase 5282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5283

Testcase 5283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5284

Testcase 5284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5285

Testcase 5285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5286

Testcase 5286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5287

Testcase 5287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5288

Testcase 5288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5289

Testcase 5289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5290

Testcase 5290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5291

Testcase 5291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5292

Testcase 5292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5293

Testcase 5293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5294

Testcase 5294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5295

Testcase 5295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5296

Testcase 5296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5297

Testcase 5297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5298

Testcase 5298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5299

Testcase 5299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5300

Testcase 5300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5301

Testcase 5301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5302

Testcase 5302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5303

Testcase 5303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5304

Testcase 5304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5305

Testcase 5305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5306

Testcase 5306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5307

Testcase 5307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5308

Testcase 5308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5309

Testcase 5309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5310

Testcase 5310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5311

Testcase 5311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5312

Testcase 5312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5313

Testcase 5313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5314

Testcase 5314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5315

Testcase 5315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5316

Testcase 5316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5317

Testcase 5317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5318

Testcase 5318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5319

Testcase 5319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5320

Testcase 5320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5321

Testcase 5321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5322

Testcase 5322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5323

Testcase 5323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5324

Testcase 5324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5325

Testcase 5325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5326

Testcase 5326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5327

Testcase 5327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5328

Testcase 5328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5329

Testcase 5329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5330

Testcase 5330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5331

Testcase 5331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5332

Testcase 5332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5333

Testcase 5333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5334

Testcase 5334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5335

Testcase 5335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5336

Testcase 5336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5337

Testcase 5337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5338

Testcase 5338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5339

Testcase 5339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5340

Testcase 5340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5341

Testcase 5341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5342

Testcase 5342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5343

Testcase 5343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5344

Testcase 5344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5345

Testcase 5345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5346

Testcase 5346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5347

Testcase 5347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5348

Testcase 5348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5349

Testcase 5349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5350

Testcase 5350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5351

Testcase 5351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5352

Testcase 5352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5353

Testcase 5353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5354

Testcase 5354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5355

Testcase 5355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5356

Testcase 5356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5357

Testcase 5357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5358

Testcase 5358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5359

Testcase 5359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5360

Testcase 5360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5361

Testcase 5361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5362

Testcase 5362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5363

Testcase 5363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5364

Testcase 5364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5365

Testcase 5365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5366

Testcase 5366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5367

Testcase 5367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5368

Testcase 5368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5369

Testcase 5369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5370

Testcase 5370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5371

Testcase 5371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5372

Testcase 5372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5373

Testcase 5373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5374

Testcase 5374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5375

Testcase 5375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5376

Testcase 5376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5377

Testcase 5377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5378

Testcase 5378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5379

Testcase 5379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5380

Testcase 5380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5381

Testcase 5381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5382

Testcase 5382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5383

Testcase 5383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5384

Testcase 5384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5385

Testcase 5385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5386

Testcase 5386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5387

Testcase 5387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5388

Testcase 5388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5389

Testcase 5389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5390

Testcase 5390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5391

Testcase 5391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5392

Testcase 5392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5393

Testcase 5393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5394

Testcase 5394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5395

Testcase 5395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5396

Testcase 5396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5397

Testcase 5397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5398

Testcase 5398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5399

Testcase 5399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5400

Testcase 5400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5401

Testcase 5401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5402

Testcase 5402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5403

Testcase 5403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5404

Testcase 5404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5405

Testcase 5405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5406

Testcase 5406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5407

Testcase 5407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5408

Testcase 5408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5409

Testcase 5409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5410

Testcase 5410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5411

Testcase 5411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5412

Testcase 5412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5413

Testcase 5413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5414

Testcase 5414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5415

Testcase 5415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5416

Testcase 5416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5417

Testcase 5417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5418

Testcase 5418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5419

Testcase 5419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5420

Testcase 5420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5421

Testcase 5421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5422

Testcase 5422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5423

Testcase 5423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5424

Testcase 5424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5425

Testcase 5425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5426

Testcase 5426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5427

Testcase 5427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5428

Testcase 5428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5429

Testcase 5429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5430

Testcase 5430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5431

Testcase 5431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5432

Testcase 5432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5433

Testcase 5433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5434

Testcase 5434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5435

Testcase 5435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5436

Testcase 5436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5437

Testcase 5437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5438

Testcase 5438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5439

Testcase 5439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5440

Testcase 5440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5441

Testcase 5441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5442

Testcase 5442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5443

Testcase 5443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5444

Testcase 5444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5445

Testcase 5445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5446

Testcase 5446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5447

Testcase 5447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5448

Testcase 5448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5449

Testcase 5449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5450

Testcase 5450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5451

Testcase 5451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5452

Testcase 5452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5453

Testcase 5453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5454

Testcase 5454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5455

Testcase 5455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5456

Testcase 5456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5457

Testcase 5457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5458

Testcase 5458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5459

Testcase 5459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5460

Testcase 5460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5461

Testcase 5461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5462

Testcase 5462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5463

Testcase 5463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5464

Testcase 5464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5465

Testcase 5465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5466

Testcase 5466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5467

Testcase 5467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5468

Testcase 5468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5469

Testcase 5469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5470

Testcase 5470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5471

Testcase 5471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5472

Testcase 5472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5473

Testcase 5473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5474

Testcase 5474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5475

Testcase 5475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5476

Testcase 5476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5477

Testcase 5477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5478

Testcase 5478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5479

Testcase 5479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5480

Testcase 5480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5481

Testcase 5481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5482

Testcase 5482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5483

Testcase 5483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5484

Testcase 5484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5485

Testcase 5485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5486

Testcase 5486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5487

Testcase 5487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5488

Testcase 5488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5489

Testcase 5489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5490

Testcase 5490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5491

Testcase 5491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5492

Testcase 5492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5493

Testcase 5493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5494

Testcase 5494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5495

Testcase 5495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5496

Testcase 5496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5497

Testcase 5497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5498

Testcase 5498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5499

Testcase 5499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5500

Testcase 5500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5501

Testcase 5501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5502

Testcase 5502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5503

Testcase 5503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5504

Testcase 5504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5505

Testcase 5505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5506

Testcase 5506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5507

Testcase 5507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5508

Testcase 5508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5509

Testcase 5509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5510

Testcase 5510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5511

Testcase 5511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5512

Testcase 5512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5513

Testcase 5513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5514

Testcase 5514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5515

Testcase 5515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5516

Testcase 5516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5517

Testcase 5517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5518

Testcase 5518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5519

Testcase 5519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5520

Testcase 5520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5521

Testcase 5521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5522

Testcase 5522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5523

Testcase 5523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5524

Testcase 5524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5525

Testcase 5525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5526

Testcase 5526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5527

Testcase 5527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5528

Testcase 5528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5529

Testcase 5529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5530

Testcase 5530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5531

Testcase 5531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5532

Testcase 5532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5533

Testcase 5533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5534

Testcase 5534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5535

Testcase 5535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5536

Testcase 5536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5537

Testcase 5537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5538

Testcase 5538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5539

Testcase 5539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5540

Testcase 5540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5541

Testcase 5541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:43+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5542

Testcase 5542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5543

Testcase 5543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5544

Testcase 5544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5545

Testcase 5545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5546

Testcase 5546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5547

Testcase 5547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5548

Testcase 5548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5549

Testcase 5549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5550

Testcase 5550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5551

Testcase 5551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5552

Testcase 5552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5553

Testcase 5553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5554

Testcase 5554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5555

Testcase 5555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5556

Testcase 5556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5557

Testcase 5557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5558

Testcase 5558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5559

Testcase 5559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5560

Testcase 5560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5561

Testcase 5561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5562

Testcase 5562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5563

Testcase 5563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5564

Testcase 5564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5565

Testcase 5565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5566

Testcase 5566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5567

Testcase 5567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5568

Testcase 5568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5569

Testcase 5569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5570

Testcase 5570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5571

Testcase 5571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5572

Testcase 5572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5573

Testcase 5573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5574

Testcase 5574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5575

Testcase 5575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5576

Testcase 5576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5577

Testcase 5577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5578

Testcase 5578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5579

Testcase 5579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5580

Testcase 5580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5581

Testcase 5581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5582

Testcase 5582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5583

Testcase 5583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5584

Testcase 5584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5585

Testcase 5585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5586

Testcase 5586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5587

Testcase 5587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5588

Testcase 5588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5589

Testcase 5589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5590

Testcase 5590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5591

Testcase 5591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5592

Testcase 5592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5593

Testcase 5593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5594

Testcase 5594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5595

Testcase 5595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5596

Testcase 5596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5597

Testcase 5597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5598

Testcase 5598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5599

Testcase 5599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5600

Testcase 5600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5601

Testcase 5601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5602

Testcase 5602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5603

Testcase 5603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5604

Testcase 5604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5605

Testcase 5605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5606

Testcase 5606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5607

Testcase 5607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5608

Testcase 5608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5609

Testcase 5609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5610

Testcase 5610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5611

Testcase 5611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5612

Testcase 5612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5613

Testcase 5613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5614

Testcase 5614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5615

Testcase 5615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5616

Testcase 5616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5617

Testcase 5617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5618

Testcase 5618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5619

Testcase 5619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5620

Testcase 5620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5621

Testcase 5621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5622

Testcase 5622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5623

Testcase 5623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5624

Testcase 5624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5625

Testcase 5625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5626

Testcase 5626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5627

Testcase 5627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5628

Testcase 5628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5629

Testcase 5629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5630

Testcase 5630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5631

Testcase 5631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5632

Testcase 5632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5633

Testcase 5633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5634

Testcase 5634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5635

Testcase 5635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5636

Testcase 5636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5637

Testcase 5637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5638

Testcase 5638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5639

Testcase 5639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5640

Testcase 5640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5641

Testcase 5641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5642

Testcase 5642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5643

Testcase 5643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5644

Testcase 5644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5645

Testcase 5645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5646

Testcase 5646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5647

Testcase 5647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5648

Testcase 5648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5649

Testcase 5649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5650

Testcase 5650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5651

Testcase 5651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5652

Testcase 5652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5653

Testcase 5653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5654

Testcase 5654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5655

Testcase 5655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5656

Testcase 5656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5657

Testcase 5657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5658

Testcase 5658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5659

Testcase 5659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5660

Testcase 5660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5661

Testcase 5661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5662

Testcase 5662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5663

Testcase 5663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5664

Testcase 5664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5665

Testcase 5665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5666

Testcase 5666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5667

Testcase 5667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5668

Testcase 5668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5669

Testcase 5669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5670

Testcase 5670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5671

Testcase 5671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5672

Testcase 5672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5673

Testcase 5673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5674

Testcase 5674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5675

Testcase 5675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5676

Testcase 5676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5677

Testcase 5677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5678

Testcase 5678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5679

Testcase 5679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5680

Testcase 5680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5681

Testcase 5681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5682

Testcase 5682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5683

Testcase 5683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5684

Testcase 5684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5685

Testcase 5685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5686

Testcase 5686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5687

Testcase 5687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5688

Testcase 5688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5689

Testcase 5689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5690

Testcase 5690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5691

Testcase 5691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5692

Testcase 5692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5693

Testcase 5693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5694

Testcase 5694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5695

Testcase 5695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5696

Testcase 5696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5697

Testcase 5697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5698

Testcase 5698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5699

Testcase 5699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5700

Testcase 5700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5701

Testcase 5701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5702

Testcase 5702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5703

Testcase 5703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5704

Testcase 5704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5705

Testcase 5705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5706

Testcase 5706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5707

Testcase 5707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5708

Testcase 5708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5709

Testcase 5709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5710

Testcase 5710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5711

Testcase 5711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5712

Testcase 5712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5713

Testcase 5713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5714

Testcase 5714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5715

Testcase 5715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5716

Testcase 5716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5717

Testcase 5717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5718

Testcase 5718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5719

Testcase 5719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5720

Testcase 5720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5721

Testcase 5721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5722

Testcase 5722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5723

Testcase 5723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5724

Testcase 5724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5725

Testcase 5725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5726

Testcase 5726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5727

Testcase 5727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5728

Testcase 5728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5729

Testcase 5729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5730

Testcase 5730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5731

Testcase 5731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5732

Testcase 5732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5733

Testcase 5733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5734

Testcase 5734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5735

Testcase 5735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5736

Testcase 5736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5737

Testcase 5737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5738

Testcase 5738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5739

Testcase 5739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5740

Testcase 5740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5741

Testcase 5741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5742

Testcase 5742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5743

Testcase 5743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5744

Testcase 5744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5745

Testcase 5745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5746

Testcase 5746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5747

Testcase 5747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5748

Testcase 5748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5749

Testcase 5749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5750

Testcase 5750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5751

Testcase 5751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5752

Testcase 5752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5753

Testcase 5753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5754

Testcase 5754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5755

Testcase 5755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5756

Testcase 5756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5757

Testcase 5757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5758

Testcase 5758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5759

Testcase 5759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5760

Testcase 5760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5761

Testcase 5761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5762

Testcase 5762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5763

Testcase 5763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5764

Testcase 5764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5765

Testcase 5765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5766

Testcase 5766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5767

Testcase 5767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5768

Testcase 5768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5769

Testcase 5769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5770

Testcase 5770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5771

Testcase 5771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5772

Testcase 5772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5773

Testcase 5773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5774

Testcase 5774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5775

Testcase 5775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5776

Testcase 5776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5777

Testcase 5777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5778

Testcase 5778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5779

Testcase 5779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5780

Testcase 5780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5781

Testcase 5781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5782

Testcase 5782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5783

Testcase 5783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5784

Testcase 5784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5785

Testcase 5785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5786

Testcase 5786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5787

Testcase 5787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5788

Testcase 5788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5789

Testcase 5789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5790

Testcase 5790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5791

Testcase 5791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5792

Testcase 5792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5793

Testcase 5793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5794

Testcase 5794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5795

Testcase 5795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5796

Testcase 5796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5797

Testcase 5797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5798

Testcase 5798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5799

Testcase 5799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5800

Testcase 5800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5801

Testcase 5801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5802

Testcase 5802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5803

Testcase 5803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5804

Testcase 5804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5805

Testcase 5805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5806

Testcase 5806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5807

Testcase 5807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5808

Testcase 5808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5809

Testcase 5809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5810

Testcase 5810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5811

Testcase 5811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5812

Testcase 5812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5813

Testcase 5813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5814

Testcase 5814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5815

Testcase 5815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5816

Testcase 5816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5817

Testcase 5817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5818

Testcase 5818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5819

Testcase 5819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5820

Testcase 5820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5821

Testcase 5821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5822

Testcase 5822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5823

Testcase 5823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5824

Testcase 5824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5825

Testcase 5825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5826

Testcase 5826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5827

Testcase 5827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5828

Testcase 5828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5829

Testcase 5829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5830

Testcase 5830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5831

Testcase 5831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5832

Testcase 5832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5833

Testcase 5833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5834

Testcase 5834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5835

Testcase 5835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5836

Testcase 5836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5837

Testcase 5837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5838

Testcase 5838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5839

Testcase 5839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5840

Testcase 5840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5841

Testcase 5841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5842

Testcase 5842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5843

Testcase 5843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5844

Testcase 5844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5845

Testcase 5845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5846

Testcase 5846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5847

Testcase 5847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5848

Testcase 5848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5849

Testcase 5849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5850

Testcase 5850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5851

Testcase 5851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5852

Testcase 5852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5853

Testcase 5853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5854

Testcase 5854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5855

Testcase 5855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5856

Testcase 5856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5857

Testcase 5857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5858

Testcase 5858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5859

Testcase 5859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5860

Testcase 5860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5861

Testcase 5861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5862

Testcase 5862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5863

Testcase 5863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5864

Testcase 5864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5865

Testcase 5865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5866

Testcase 5866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5867

Testcase 5867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5868

Testcase 5868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5869

Testcase 5869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5870

Testcase 5870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5871

Testcase 5871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5872

Testcase 5872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5873

Testcase 5873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5874

Testcase 5874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5875

Testcase 5875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5876

Testcase 5876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5877

Testcase 5877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5878

Testcase 5878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5879

Testcase 5879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5880

Testcase 5880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5881

Testcase 5881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5882

Testcase 5882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5883

Testcase 5883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5884

Testcase 5884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5885

Testcase 5885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5886

Testcase 5886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5887

Testcase 5887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5888

Testcase 5888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5889

Testcase 5889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5890

Testcase 5890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5891

Testcase 5891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5892

Testcase 5892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5893

Testcase 5893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5894

Testcase 5894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5895

Testcase 5895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5896

Testcase 5896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5897

Testcase 5897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5898

Testcase 5898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5899

Testcase 5899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5900

Testcase 5900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5901

Testcase 5901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5902

Testcase 5902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5903

Testcase 5903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5904

Testcase 5904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5905

Testcase 5905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5906

Testcase 5906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5907

Testcase 5907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5908

Testcase 5908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5909

Testcase 5909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5910

Testcase 5910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5911

Testcase 5911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5912

Testcase 5912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5913

Testcase 5913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5914

Testcase 5914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5915

Testcase 5915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5916

Testcase 5916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5917

Testcase 5917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5918

Testcase 5918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5919

Testcase 5919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5920

Testcase 5920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc5921

Testcase 5921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5922

Testcase 5922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5923

Testcase 5923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5924

Testcase 5924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5925

Testcase 5925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5926

Testcase 5926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5927

Testcase 5927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5928

Testcase 5928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5929

Testcase 5929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5930

Testcase 5930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5931

Testcase 5931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5932

Testcase 5932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5933

Testcase 5933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5934

Testcase 5934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5935

Testcase 5935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5936

Testcase 5936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5937

Testcase 5937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5938

Testcase 5938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5939

Testcase 5939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5940

Testcase 5940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5941

Testcase 5941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5942

Testcase 5942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5943

Testcase 5943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5944

Testcase 5944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5945

Testcase 5945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5946

Testcase 5946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5947

Testcase 5947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5948

Testcase 5948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5949

Testcase 5949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5950

Testcase 5950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5951

Testcase 5951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5952

Testcase 5952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5953

Testcase 5953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5954

Testcase 5954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5955

Testcase 5955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5956

Testcase 5956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5957

Testcase 5957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5958

Testcase 5958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5959

Testcase 5959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5960

Testcase 5960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5961

Testcase 5961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5962

Testcase 5962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5963

Testcase 5963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5964

Testcase 5964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5965

Testcase 5965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5966

Testcase 5966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5967

Testcase 5967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5968

Testcase 5968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5969

Testcase 5969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5970

Testcase 5970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5971

Testcase 5971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5972

Testcase 5972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5973

Testcase 5973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5974

Testcase 5974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5975

Testcase 5975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5976

Testcase 5976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5977

Testcase 5977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5978

Testcase 5978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5979

Testcase 5979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5980

Testcase 5980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5981

Testcase 5981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5982

Testcase 5982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5983

Testcase 5983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5984

Testcase 5984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5985

Testcase 5985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5986

Testcase 5986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5987

Testcase 5987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5988

Testcase 5988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5989

Testcase 5989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5990

Testcase 5990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5991

Testcase 5991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	excluded subtree violation
openssl-3.3.2	❌ (unexpected failure)	excluded subtree violation
openssl-3.2.3	❌ (unexpected failure)	excluded subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	excluded subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	excluded subtree violation
openssl-1.1	❌ (unexpected failure)	excluded subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc5992

Testcase 5992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5993

Testcase 5993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5994

Testcase 5994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5995

Testcase 5995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5996

Testcase 5996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5997

Testcase 5997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5998

Testcase 5998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc5999

Testcase 5999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6000

Testcase 6000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6001

Testcase 6001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6002

Testcase 6002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6003

Testcase 6003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6004

Testcase 6004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6005

Testcase 6005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6006

Testcase 6006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6007

Testcase 6007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6008

Testcase 6008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6009

Testcase 6009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6010

Testcase 6010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6011

Testcase 6011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6012

Testcase 6012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6013

Testcase 6013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6014

Testcase 6014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6015

Testcase 6015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6016

Testcase 6016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6017

Testcase 6017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6018

Testcase 6018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6019

Testcase 6019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6020

Testcase 6020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6021

Testcase 6021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6022

Testcase 6022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6023

Testcase 6023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6024

Testcase 6024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6025

Testcase 6025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6026

Testcase 6026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6027

Testcase 6027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6028

Testcase 6028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6029

Testcase 6029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6030

Testcase 6030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6031

Testcase 6031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6032

Testcase 6032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6033

Testcase 6033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6034

Testcase 6034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6035

Testcase 6035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6036

Testcase 6036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6037

Testcase 6037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6038

Testcase 6038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6039

Testcase 6039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6040

Testcase 6040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6041

Testcase 6041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6042

Testcase 6042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6043

Testcase 6043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6044

Testcase 6044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6045

Testcase 6045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6046

Testcase 6046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6047

Testcase 6047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6048

Testcase 6048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6049

Testcase 6049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6050

Testcase 6050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6051

Testcase 6051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6052

Testcase 6052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6053

Testcase 6053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6054

Testcase 6054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6055

Testcase 6055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6056

Testcase 6056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6057

Testcase 6057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6058

Testcase 6058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6059

Testcase 6059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6060

Testcase 6060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6061

Testcase 6061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6062

Testcase 6062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6063

Testcase 6063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6064

Testcase 6064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6065

Testcase 6065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6066

Testcase 6066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6067

Testcase 6067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6068

Testcase 6068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6069

Testcase 6069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6070

Testcase 6070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6071

Testcase 6071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6072

Testcase 6072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6073

Testcase 6073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6074

Testcase 6074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6075

Testcase 6075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6076

Testcase 6076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6077

Testcase 6077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6078

Testcase 6078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6079

Testcase 6079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6080

Testcase 6080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6081

Testcase 6081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6082

Testcase 6082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6083

Testcase 6083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6084

Testcase 6084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6085

Testcase 6085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6086

Testcase 6086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6087

Testcase 6087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6088

Testcase 6088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6089

Testcase 6089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6090

Testcase 6090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6091

Testcase 6091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6092

Testcase 6092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6093

Testcase 6093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6094

Testcase 6094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6095

Testcase 6095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6096

Testcase 6096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6097

Testcase 6097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6098

Testcase 6098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6099

Testcase 6099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6100

Testcase 6100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6101

Testcase 6101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6102

Testcase 6102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6103

Testcase 6103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6104

Testcase 6104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6105

Testcase 6105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6106

Testcase 6106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6107

Testcase 6107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6108

Testcase 6108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6109

Testcase 6109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6110

Testcase 6110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6111

Testcase 6111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6112

Testcase 6112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6113

Testcase 6113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6114

Testcase 6114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6115

Testcase 6115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6116

Testcase 6116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6117

Testcase 6117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6118

Testcase 6118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6119

Testcase 6119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6120

Testcase 6120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6121

Testcase 6121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6122

Testcase 6122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6123

Testcase 6123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6124

Testcase 6124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6125

Testcase 6125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6126

Testcase 6126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6127

Testcase 6127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6128

Testcase 6128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6129

Testcase 6129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6130

Testcase 6130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6131

Testcase 6131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6132

Testcase 6132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6133

Testcase 6133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6134

Testcase 6134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6135

Testcase 6135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6136

Testcase 6136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6137

Testcase 6137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6138

Testcase 6138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6139

Testcase 6139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6140

Testcase 6140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6141

Testcase 6141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6142

Testcase 6142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6143

Testcase 6143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6144

Testcase 6144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6145

Testcase 6145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6146

Testcase 6146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6147

Testcase 6147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6148

Testcase 6148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6149

Testcase 6149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6150

Testcase 6150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6151

Testcase 6151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6152

Testcase 6152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6153

Testcase 6153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6154

Testcase 6154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6155

Testcase 6155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6156

Testcase 6156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6157

Testcase 6157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6158

Testcase 6158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6159

Testcase 6159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6160

Testcase 6160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6161

Testcase 6161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6162

Testcase 6162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6163

Testcase 6163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6164

Testcase 6164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6165

Testcase 6165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6166

Testcase 6166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6167

Testcase 6167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6168

Testcase 6168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6169

Testcase 6169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6170

Testcase 6170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6171

Testcase 6171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6172

Testcase 6172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6173

Testcase 6173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6174

Testcase 6174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6175

Testcase 6175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6176

Testcase 6176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6177

Testcase 6177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6178

Testcase 6178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6179

Testcase 6179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6180

Testcase 6180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6181

Testcase 6181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6182

Testcase 6182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6183

Testcase 6183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6184

Testcase 6184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6185

Testcase 6185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6186

Testcase 6186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6187

Testcase 6187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6188

Testcase 6188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6189

Testcase 6189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6190

Testcase 6190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6191

Testcase 6191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6192

Testcase 6192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6193

Testcase 6193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6194

Testcase 6194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6195

Testcase 6195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6196

Testcase 6196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6197

Testcase 6197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6198

Testcase 6198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6199

Testcase 6199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6200

Testcase 6200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6201

Testcase 6201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6202

Testcase 6202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6203

Testcase 6203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6204

Testcase 6204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6205

Testcase 6205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6206

Testcase 6206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6207

Testcase 6207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6208

Testcase 6208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6209

Testcase 6209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6210

Testcase 6210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6211

Testcase 6211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6212

Testcase 6212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6213

Testcase 6213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6214

Testcase 6214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6215

Testcase 6215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6216

Testcase 6216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6217

Testcase 6217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6218

Testcase 6218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6219

Testcase 6219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6220

Testcase 6220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6221

Testcase 6221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6222

Testcase 6222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6223

Testcase 6223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6224

Testcase 6224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6225

Testcase 6225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6226

Testcase 6226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6227

Testcase 6227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6228

Testcase 6228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6229

Testcase 6229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6230

Testcase 6230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6231

Testcase 6231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6232

Testcase 6232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6233

Testcase 6233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6234

Testcase 6234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6235

Testcase 6235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6236

Testcase 6236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6237

Testcase 6237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6238

Testcase 6238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6239

Testcase 6239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6240

Testcase 6240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6241

Testcase 6241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6242

Testcase 6242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6243

Testcase 6243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6244

Testcase 6244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6245

Testcase 6245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6246

Testcase 6246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6247

Testcase 6247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6248

Testcase 6248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6249

Testcase 6249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6250

Testcase 6250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6251

Testcase 6251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6252

Testcase 6252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6253

Testcase 6253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6254

Testcase 6254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6255

Testcase 6255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6256

Testcase 6256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6257

Testcase 6257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6258

Testcase 6258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6259

Testcase 6259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6260

Testcase 6260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6261

Testcase 6261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6262

Testcase 6262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6263

Testcase 6263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6264

Testcase 6264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6265

Testcase 6265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6266

Testcase 6266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6267

Testcase 6267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6268

Testcase 6268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6269

Testcase 6269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6270

Testcase 6270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6271

Testcase 6271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6272

Testcase 6272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6273

Testcase 6273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6274

Testcase 6274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6275

Testcase 6275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6276

Testcase 6276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6277

Testcase 6277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6278

Testcase 6278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6279

Testcase 6279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6280

Testcase 6280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6281

Testcase 6281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6282

Testcase 6282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6283

Testcase 6283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6284

Testcase 6284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6285

Testcase 6285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6286

Testcase 6286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6287

Testcase 6287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6288

Testcase 6288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6289

Testcase 6289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6290

Testcase 6290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6291

Testcase 6291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6292

Testcase 6292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6293

Testcase 6293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6294

Testcase 6294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6295

Testcase 6295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6296

Testcase 6296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6297

Testcase 6297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6298

Testcase 6298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6299

Testcase 6299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6300

Testcase 6300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6301

Testcase 6301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6302

Testcase 6302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6303

Testcase 6303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6304

Testcase 6304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6305

Testcase 6305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6306

Testcase 6306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6307

Testcase 6307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6308

Testcase 6308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6309

Testcase 6309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6310

Testcase 6310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6311

Testcase 6311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6312

Testcase 6312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6313

Testcase 6313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6314

Testcase 6314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6315

Testcase 6315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6316

Testcase 6316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6317

Testcase 6317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6318

Testcase 6318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6319

Testcase 6319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6320

Testcase 6320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6321

Testcase 6321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6322

Testcase 6322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6323

Testcase 6323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6324

Testcase 6324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6325

Testcase 6325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6326

Testcase 6326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6327

Testcase 6327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6328

Testcase 6328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6329

Testcase 6329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6330

Testcase 6330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6331

Testcase 6331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6332

Testcase 6332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6333

Testcase 6333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6334

Testcase 6334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6335

Testcase 6335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6336

Testcase 6336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6337

Testcase 6337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6338

Testcase 6338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6339

Testcase 6339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6340

Testcase 6340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6341

Testcase 6341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6342

Testcase 6342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6343

Testcase 6343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6344

Testcase 6344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6345

Testcase 6345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6346

Testcase 6346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6347

Testcase 6347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6348

Testcase 6348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6349

Testcase 6349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6350

Testcase 6350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6351

Testcase 6351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6352

Testcase 6352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6353

Testcase 6353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6354

Testcase 6354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6355

Testcase 6355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6356

Testcase 6356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6357

Testcase 6357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6358

Testcase 6358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6359

Testcase 6359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6360

Testcase 6360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6361

Testcase 6361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6362

Testcase 6362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6363

Testcase 6363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6364

Testcase 6364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6365

Testcase 6365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6366

Testcase 6366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6367

Testcase 6367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6368

Testcase 6368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6369

Testcase 6369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6370

Testcase 6370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6371

Testcase 6371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6372

Testcase 6372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6373

Testcase 6373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6374

Testcase 6374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6375

Testcase 6375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6376

Testcase 6376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6377

Testcase 6377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6378

Testcase 6378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6379

Testcase 6379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6380

Testcase 6380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6381

Testcase 6381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6382

Testcase 6382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6383

Testcase 6383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6384

Testcase 6384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6385

Testcase 6385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6386

Testcase 6386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6387

Testcase 6387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6388

Testcase 6388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6389

Testcase 6389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6390

Testcase 6390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6391

Testcase 6391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6392

Testcase 6392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6393

Testcase 6393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6394

Testcase 6394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6395

Testcase 6395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6396

Testcase 6396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6397

Testcase 6397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6398

Testcase 6398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6399

Testcase 6399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6400

Testcase 6400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6401

Testcase 6401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6402

Testcase 6402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6403

Testcase 6403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6404

Testcase 6404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6405

Testcase 6405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6406

Testcase 6406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6407

Testcase 6407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6408

Testcase 6408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6409

Testcase 6409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6410

Testcase 6410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6411

Testcase 6411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6412

Testcase 6412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6413

Testcase 6413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6414

Testcase 6414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6415

Testcase 6415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6416

Testcase 6416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6417

Testcase 6417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6418

Testcase 6418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6419

Testcase 6419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6420

Testcase 6420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6421

Testcase 6421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6422

Testcase 6422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6423

Testcase 6423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6424

Testcase 6424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6425

Testcase 6425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6426

Testcase 6426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6427

Testcase 6427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6428

Testcase 6428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6429

Testcase 6429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6430

Testcase 6430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6431

Testcase 6431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6432

Testcase 6432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6433

Testcase 6433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6434

Testcase 6434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6435

Testcase 6435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6436

Testcase 6436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6437

Testcase 6437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6438

Testcase 6438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6439

Testcase 6439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6440

Testcase 6440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6441

Testcase 6441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6442

Testcase 6442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6443

Testcase 6443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6444

Testcase 6444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6445

Testcase 6445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6446

Testcase 6446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6447

Testcase 6447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6448

Testcase 6448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6449

Testcase 6449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6450

Testcase 6450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6451

Testcase 6451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6452

Testcase 6452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6453

Testcase 6453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6454

Testcase 6454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6455

Testcase 6455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6456

Testcase 6456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6457

Testcase 6457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6458

Testcase 6458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6459

Testcase 6459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6460

Testcase 6460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6461

Testcase 6461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6462

Testcase 6462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6463

Testcase 6463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6464

Testcase 6464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6465

Testcase 6465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6466

Testcase 6466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6467

Testcase 6467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6468

Testcase 6468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6469

Testcase 6469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6470

Testcase 6470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6471

Testcase 6471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6472

Testcase 6472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6473

Testcase 6473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6474

Testcase 6474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6475

Testcase 6475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6476

Testcase 6476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6477

Testcase 6477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6478

Testcase 6478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6479

Testcase 6479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6480

Testcase 6480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6481

Testcase 6481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6482

Testcase 6482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6483

Testcase 6483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6484

Testcase 6484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6485

Testcase 6485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6486

Testcase 6486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6487

Testcase 6487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6488

Testcase 6488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6489

Testcase 6489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6490

Testcase 6490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6491

Testcase 6491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6492

Testcase 6492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6493

Testcase 6493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6494

Testcase 6494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6495

Testcase 6495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6496

Testcase 6496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6497

Testcase 6497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6498

Testcase 6498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6499

Testcase 6499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6500

Testcase 6500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6501

Testcase 6501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6502

Testcase 6502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6503

Testcase 6503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6504

Testcase 6504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6505

Testcase 6505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6506

Testcase 6506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6507

Testcase 6507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6508

Testcase 6508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6509

Testcase 6509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6510

Testcase 6510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6511

Testcase 6511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6512

Testcase 6512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6513

Testcase 6513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6514

Testcase 6514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6515

Testcase 6515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6516

Testcase 6516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6517

Testcase 6517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6518

Testcase 6518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6519

Testcase 6519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6520

Testcase 6520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6521

Testcase 6521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6522

Testcase 6522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6523

Testcase 6523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6524

Testcase 6524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6525

Testcase 6525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6526

Testcase 6526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6527

Testcase 6527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6528

Testcase 6528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6529

Testcase 6529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6530

Testcase 6530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6531

Testcase 6531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6532

Testcase 6532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6533

Testcase 6533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6534

Testcase 6534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6535

Testcase 6535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6536

Testcase 6536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6537

Testcase 6537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6538

Testcase 6538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6539

Testcase 6539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6540

Testcase 6540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6541

Testcase 6541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6542

Testcase 6542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6543

Testcase 6543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6544

Testcase 6544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6545

Testcase 6545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6546

Testcase 6546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6547

Testcase 6547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6548

Testcase 6548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6549

Testcase 6549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6550

Testcase 6550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6551

Testcase 6551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6552

Testcase 6552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6553

Testcase 6553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6554

Testcase 6554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6555

Testcase 6555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6556

Testcase 6556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6557

Testcase 6557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6558

Testcase 6558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6559

Testcase 6559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6560

Testcase 6560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6561

Testcase 6561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6562

Testcase 6562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6563

Testcase 6563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6564

Testcase 6564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6565

Testcase 6565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6566

Testcase 6566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6567

Testcase 6567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6568

Testcase 6568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6569

Testcase 6569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6570

Testcase 6570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6571

Testcase 6571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6572

Testcase 6572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6573

Testcase 6573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6574

Testcase 6574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6575

Testcase 6575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6576

Testcase 6576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6577

Testcase 6577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6578

Testcase 6578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6579

Testcase 6579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6580

Testcase 6580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6581

Testcase 6581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6582

Testcase 6582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6583

Testcase 6583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6584

Testcase 6584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6585

Testcase 6585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6586

Testcase 6586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6587

Testcase 6587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6588

Testcase 6588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6589

Testcase 6589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6590

Testcase 6590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6591

Testcase 6591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6592

Testcase 6592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6593

Testcase 6593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6594

Testcase 6594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6595

Testcase 6595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6596

Testcase 6596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6597

Testcase 6597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6598

Testcase 6598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6599

Testcase 6599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6600

Testcase 6600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6601

Testcase 6601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6602

Testcase 6602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6603

Testcase 6603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6604

Testcase 6604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6605

Testcase 6605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6606

Testcase 6606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6607

Testcase 6607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6608

Testcase 6608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6609

Testcase 6609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6610

Testcase 6610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6611

Testcase 6611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6612

Testcase 6612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6613

Testcase 6613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6614

Testcase 6614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6615

Testcase 6615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6616

Testcase 6616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6617

Testcase 6617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6618

Testcase 6618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6619

Testcase 6619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6620

Testcase 6620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6621

Testcase 6621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6622

Testcase 6622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6623

Testcase 6623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6624

Testcase 6624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6625

Testcase 6625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6626

Testcase 6626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6627

Testcase 6627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6628

Testcase 6628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6629

Testcase 6629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6630

Testcase 6630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6631

Testcase 6631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6632

Testcase 6632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6633

Testcase 6633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6634

Testcase 6634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6635

Testcase 6635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6636

Testcase 6636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6637

Testcase 6637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6638

Testcase 6638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6639

Testcase 6639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6640

Testcase 6640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6641

Testcase 6641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6642

Testcase 6642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6643

Testcase 6643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6644

Testcase 6644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6645

Testcase 6645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6646

Testcase 6646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6647

Testcase 6647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6648

Testcase 6648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6649

Testcase 6649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6650

Testcase 6650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6651

Testcase 6651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6652

Testcase 6652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6653

Testcase 6653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6654

Testcase 6654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6655

Testcase 6655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6656

Testcase 6656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6657

Testcase 6657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6658

Testcase 6658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6659

Testcase 6659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6660

Testcase 6660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6661

Testcase 6661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6662

Testcase 6662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6663

Testcase 6663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6664

Testcase 6664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6665

Testcase 6665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6666

Testcase 6666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6667

Testcase 6667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6668

Testcase 6668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6669

Testcase 6669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6670

Testcase 6670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6671

Testcase 6671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6672

Testcase 6672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6673

Testcase 6673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6674

Testcase 6674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6675

Testcase 6675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6676

Testcase 6676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6677

Testcase 6677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6678

Testcase 6678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6679

Testcase 6679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6680

Testcase 6680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6681

Testcase 6681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6682

Testcase 6682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6683

Testcase 6683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6684

Testcase 6684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6685

Testcase 6685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6686

Testcase 6686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6687

Testcase 6687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6688

Testcase 6688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6689

Testcase 6689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6690

Testcase 6690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6691

Testcase 6691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6692

Testcase 6692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6693

Testcase 6693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6694

Testcase 6694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6695

Testcase 6695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6696

Testcase 6696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6697

Testcase 6697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6698

Testcase 6698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6699

Testcase 6699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6700

Testcase 6700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6701

Testcase 6701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6702

Testcase 6702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6703

Testcase 6703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6704

Testcase 6704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6705

Testcase 6705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6706

Testcase 6706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6707

Testcase 6707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6708

Testcase 6708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6709

Testcase 6709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6710

Testcase 6710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6711

Testcase 6711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6712

Testcase 6712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6713

Testcase 6713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6714

Testcase 6714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6715

Testcase 6715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6716

Testcase 6716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6717

Testcase 6717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6718

Testcase 6718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6719

Testcase 6719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6720

Testcase 6720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6721

Testcase 6721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6722

Testcase 6722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6723

Testcase 6723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6724

Testcase 6724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6725

Testcase 6725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6726

Testcase 6726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6727

Testcase 6727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6728

Testcase 6728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6729

Testcase 6729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6730

Testcase 6730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6731

Testcase 6731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6732

Testcase 6732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6733

Testcase 6733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6734

Testcase 6734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6735

Testcase 6735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6736

Testcase 6736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6737

Testcase 6737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6738

Testcase 6738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6739

Testcase 6739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6740

Testcase 6740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6741

Testcase 6741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6742

Testcase 6742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6743

Testcase 6743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6744

Testcase 6744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6745

Testcase 6745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6746

Testcase 6746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6747

Testcase 6747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6748

Testcase 6748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6749

Testcase 6749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6750

Testcase 6750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6751

Testcase 6751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6752

Testcase 6752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6753

Testcase 6753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6754

Testcase 6754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6755

Testcase 6755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6756

Testcase 6756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6757

Testcase 6757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6758

Testcase 6758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6759

Testcase 6759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6760

Testcase 6760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6761

Testcase 6761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6762

Testcase 6762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6763

Testcase 6763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6764

Testcase 6764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6765

Testcase 6765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6766

Testcase 6766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6767

Testcase 6767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6768

Testcase 6768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6769

Testcase 6769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6770

Testcase 6770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6771

Testcase 6771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6772

Testcase 6772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6773

Testcase 6773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6774

Testcase 6774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6775

Testcase 6775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6776

Testcase 6776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6777

Testcase 6777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6778

Testcase 6778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6779

Testcase 6779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6780

Testcase 6780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6781

Testcase 6781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6782

Testcase 6782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6783

Testcase 6783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6784

Testcase 6784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6785

Testcase 6785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6786

Testcase 6786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6787

Testcase 6787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6788

Testcase 6788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6789

Testcase 6789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6790

Testcase 6790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6791

Testcase 6791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6792

Testcase 6792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6793

Testcase 6793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6794

Testcase 6794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6795

Testcase 6795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6796

Testcase 6796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6797

Testcase 6797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6798

Testcase 6798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6799

Testcase 6799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6800

Testcase 6800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6801

Testcase 6801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6802

Testcase 6802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6803

Testcase 6803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6804

Testcase 6804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6805

Testcase 6805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6806

Testcase 6806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6807

Testcase 6807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6808

Testcase 6808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6809

Testcase 6809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6810

Testcase 6810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6811

Testcase 6811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6812

Testcase 6812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6813

Testcase 6813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6814

Testcase 6814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6815

Testcase 6815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6816

Testcase 6816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6817

Testcase 6817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6818

Testcase 6818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6819

Testcase 6819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6820

Testcase 6820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6821

Testcase 6821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6822

Testcase 6822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6823

Testcase 6823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6824

Testcase 6824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6825

Testcase 6825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6826

Testcase 6826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6827

Testcase 6827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6828

Testcase 6828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6829

Testcase 6829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6830

Testcase 6830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6831

Testcase 6831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6832

Testcase 6832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6833

Testcase 6833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6834

Testcase 6834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6835

Testcase 6835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6836

Testcase 6836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6837

Testcase 6837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6838

Testcase 6838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6839

Testcase 6839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6840

Testcase 6840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6841

Testcase 6841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6842

Testcase 6842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6843

Testcase 6843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6844

Testcase 6844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6845

Testcase 6845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6846

Testcase 6846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6847

Testcase 6847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6848

Testcase 6848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6849

Testcase 6849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6850

Testcase 6850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6851

Testcase 6851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6852

Testcase 6852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6853

Testcase 6853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6854

Testcase 6854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6855

Testcase 6855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6856

Testcase 6856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6857

Testcase 6857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6858

Testcase 6858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6859

Testcase 6859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6860

Testcase 6860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6861

Testcase 6861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6862

Testcase 6862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6863

Testcase 6863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6864

Testcase 6864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6865

Testcase 6865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6866

Testcase 6866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6867

Testcase 6867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6868

Testcase 6868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6869

Testcase 6869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6870

Testcase 6870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6871

Testcase 6871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6872

Testcase 6872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6873

Testcase 6873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6874

Testcase 6874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6875

Testcase 6875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6876

Testcase 6876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6877

Testcase 6877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6878

Testcase 6878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6879

Testcase 6879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6880

Testcase 6880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6881

Testcase 6881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6882

Testcase 6882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6883

Testcase 6883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6884

Testcase 6884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6885

Testcase 6885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6886

Testcase 6886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6887

Testcase 6887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6888

Testcase 6888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6889

Testcase 6889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6890

Testcase 6890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6891

Testcase 6891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6892

Testcase 6892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6893

Testcase 6893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6894

Testcase 6894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6895

Testcase 6895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6896

Testcase 6896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6897

Testcase 6897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6898

Testcase 6898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6899

Testcase 6899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6900

Testcase 6900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6901

Testcase 6901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6902

Testcase 6902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6903

Testcase 6903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6904

Testcase 6904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6905

Testcase 6905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6906

Testcase 6906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6907

Testcase 6907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6908

Testcase 6908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6909

Testcase 6909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6910

Testcase 6910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6911

Testcase 6911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6912

Testcase 6912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6913

Testcase 6913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6914

Testcase 6914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6915

Testcase 6915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6916

Testcase 6916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6917

Testcase 6917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6918

Testcase 6918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6919

Testcase 6919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6920

Testcase 6920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6921

Testcase 6921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6922

Testcase 6922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6923

Testcase 6923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6924

Testcase 6924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6925

Testcase 6925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6926

Testcase 6926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6927

Testcase 6927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6928

Testcase 6928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6929

Testcase 6929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6930

Testcase 6930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6931

Testcase 6931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6932

Testcase 6932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6933

Testcase 6933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6934

Testcase 6934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6935

Testcase 6935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6936

Testcase 6936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc6937

Testcase 6937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6938

Testcase 6938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6939

Testcase 6939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6940

Testcase 6940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6941

Testcase 6941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6942

Testcase 6942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6943

Testcase 6943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6944

Testcase 6944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6945

Testcase 6945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6946

Testcase 6946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6947

Testcase 6947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6948

Testcase 6948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6949

Testcase 6949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6950

Testcase 6950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6951

Testcase 6951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6952

Testcase 6952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6953

Testcase 6953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6954

Testcase 6954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6955

Testcase 6955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6956

Testcase 6956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6957

Testcase 6957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6958

Testcase 6958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6959

Testcase 6959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6960

Testcase 6960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6961

Testcase 6961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6962

Testcase 6962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6963

Testcase 6963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6964

Testcase 6964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6965

Testcase 6965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6966

Testcase 6966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6967

Testcase 6967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6968

Testcase 6968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6969

Testcase 6969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6970

Testcase 6970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6971

Testcase 6971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6972

Testcase 6972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6973

Testcase 6973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc6974

Testcase 6974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6975

Testcase 6975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6976

Testcase 6976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6977

Testcase 6977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6978

Testcase 6978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6979

Testcase 6979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6980

Testcase 6980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6981

Testcase 6981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6982

Testcase 6982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6983

Testcase 6983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6984

Testcase 6984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6985

Testcase 6985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6986

Testcase 6986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6987

Testcase 6987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6988

Testcase 6988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6989

Testcase 6989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6990

Testcase 6990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6991

Testcase 6991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6992

Testcase 6992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6993

Testcase 6993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6994

Testcase 6994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6995

Testcase 6995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6996

Testcase 6996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6997

Testcase 6997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6998

Testcase 6998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc6999

Testcase 6999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7000

Testcase 7000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7001

Testcase 7001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7002

Testcase 7002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7003

Testcase 7003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7004

Testcase 7004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7005

Testcase 7005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7006

Testcase 7006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7007

Testcase 7007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7008

Testcase 7008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7009

Testcase 7009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7010

Testcase 7010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7011

Testcase 7011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7012

Testcase 7012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7013

Testcase 7013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7014

Testcase 7014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7015

Testcase 7015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7016

Testcase 7016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7017

Testcase 7017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7018

Testcase 7018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7019

Testcase 7019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7020

Testcase 7020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7021

Testcase 7021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7022

Testcase 7022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7023

Testcase 7023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7024

Testcase 7024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7025

Testcase 7025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7026

Testcase 7026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7027

Testcase 7027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7028

Testcase 7028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7029

Testcase 7029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7030

Testcase 7030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7031

Testcase 7031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7032

Testcase 7032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7033

Testcase 7033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7034

Testcase 7034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7035

Testcase 7035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7036

Testcase 7036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7037

Testcase 7037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7038

Testcase 7038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7039

Testcase 7039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7040

Testcase 7040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7041

Testcase 7041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7042

Testcase 7042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7043

Testcase 7043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7044

Testcase 7044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7045

Testcase 7045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7046

Testcase 7046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7047

Testcase 7047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7048

Testcase 7048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7049

Testcase 7049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7050

Testcase 7050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7051

Testcase 7051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7052

Testcase 7052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7053

Testcase 7053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7054

Testcase 7054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc7055

Testcase 7055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7056

Testcase 7056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7057

Testcase 7057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7058

Testcase 7058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7059

Testcase 7059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7060

Testcase 7060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7061

Testcase 7061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7062

Testcase 7062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7063

Testcase 7063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7064

Testcase 7064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7065

Testcase 7065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7066

Testcase 7066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7067

Testcase 7067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7068

Testcase 7068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7069

Testcase 7069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7070

Testcase 7070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7071

Testcase 7071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7072

Testcase 7072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7073

Testcase 7073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7074

Testcase 7074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7075

Testcase 7075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7076

Testcase 7076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7077

Testcase 7077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7078

Testcase 7078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7079

Testcase 7079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7080

Testcase 7080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7081

Testcase 7081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7082

Testcase 7082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7083

Testcase 7083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7084

Testcase 7084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7085

Testcase 7085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7086

Testcase 7086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7087

Testcase 7087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7088

Testcase 7088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7089

Testcase 7089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7090

Testcase 7090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7091

Testcase 7091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7092

Testcase 7092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7093

Testcase 7093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7094

Testcase 7094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7095

Testcase 7095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7096

Testcase 7096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7097

Testcase 7097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7098

Testcase 7098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7099

Testcase 7099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7100

Testcase 7100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7101

Testcase 7101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7102

Testcase 7102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7103

Testcase 7103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7104

Testcase 7104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7105

Testcase 7105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7106

Testcase 7106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7107

Testcase 7107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7108

Testcase 7108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7109

Testcase 7109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7110

Testcase 7110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7111

Testcase 7111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7112

Testcase 7112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7113

Testcase 7113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7114

Testcase 7114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7115

Testcase 7115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7116

Testcase 7116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7117

Testcase 7117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7118

Testcase 7118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7119

Testcase 7119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7120

Testcase 7120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7121

Testcase 7121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7122

Testcase 7122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7123

Testcase 7123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7124

Testcase 7124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7125

Testcase 7125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7126

Testcase 7126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7127

Testcase 7127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7128

Testcase 7128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7129

Testcase 7129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7130

Testcase 7130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7131

Testcase 7131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7132

Testcase 7132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7133

Testcase 7133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7134

Testcase 7134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7135

Testcase 7135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc7136

Testcase 7136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7137

Testcase 7137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7138

Testcase 7138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7139

Testcase 7139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7140

Testcase 7140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7141

Testcase 7141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7142

Testcase 7142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7143

Testcase 7143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7144

Testcase 7144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7145

Testcase 7145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7146

Testcase 7146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7147

Testcase 7147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7148

Testcase 7148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7149

Testcase 7149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7150

Testcase 7150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7151

Testcase 7151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7152

Testcase 7152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7153

Testcase 7153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7154

Testcase 7154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7155

Testcase 7155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7156

Testcase 7156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7157

Testcase 7157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7158

Testcase 7158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7159

Testcase 7159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7160

Testcase 7160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7161

Testcase 7161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7162

Testcase 7162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7163

Testcase 7163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7164

Testcase 7164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7165

Testcase 7165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7166

Testcase 7166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7167

Testcase 7167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7168

Testcase 7168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7169

Testcase 7169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7170

Testcase 7170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7171

Testcase 7171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7172

Testcase 7172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7173

Testcase 7173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7174

Testcase 7174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7175

Testcase 7175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7176

Testcase 7176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7177

Testcase 7177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7178

Testcase 7178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7179

Testcase 7179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7180

Testcase 7180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7181

Testcase 7181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7182

Testcase 7182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7183

Testcase 7183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7184

Testcase 7184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7185

Testcase 7185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7186

Testcase 7186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7187

Testcase 7187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7188

Testcase 7188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7189

Testcase 7189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7190

Testcase 7190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7191

Testcase 7191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7192

Testcase 7192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7193

Testcase 7193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7194

Testcase 7194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7195

Testcase 7195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7196

Testcase 7196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7197

Testcase 7197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7198

Testcase 7198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7199

Testcase 7199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7200

Testcase 7200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7201

Testcase 7201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7202

Testcase 7202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7203

Testcase 7203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7204

Testcase 7204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7205

Testcase 7205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7206

Testcase 7206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7207

Testcase 7207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7208

Testcase 7208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7209

Testcase 7209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7210

Testcase 7210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7211

Testcase 7211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7212

Testcase 7212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7213

Testcase 7213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7214

Testcase 7214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7215

Testcase 7215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7216

Testcase 7216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc7217

Testcase 7217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7218

Testcase 7218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7219

Testcase 7219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7220

Testcase 7220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7221

Testcase 7221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7222

Testcase 7222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7223

Testcase 7223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7224

Testcase 7224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7225

Testcase 7225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7226

Testcase 7226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7227

Testcase 7227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7228

Testcase 7228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7229

Testcase 7229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7230

Testcase 7230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7231

Testcase 7231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7232

Testcase 7232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7233

Testcase 7233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7234

Testcase 7234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7235

Testcase 7235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7236

Testcase 7236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7237

Testcase 7237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7238

Testcase 7238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7239

Testcase 7239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7240

Testcase 7240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7241

Testcase 7241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7242

Testcase 7242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7243

Testcase 7243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7244

Testcase 7244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7245

Testcase 7245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7246

Testcase 7246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7247

Testcase 7247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7248

Testcase 7248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7249

Testcase 7249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7250

Testcase 7250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7251

Testcase 7251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7252

Testcase 7252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7253

Testcase 7253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7254

Testcase 7254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7255

Testcase 7255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7256

Testcase 7256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7257

Testcase 7257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7258

Testcase 7258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7259

Testcase 7259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7260

Testcase 7260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7261

Testcase 7261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7262

Testcase 7262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7263

Testcase 7263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7264

Testcase 7264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7265

Testcase 7265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7266

Testcase 7266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7267

Testcase 7267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7268

Testcase 7268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7269

Testcase 7269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7270

Testcase 7270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7271

Testcase 7271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7272

Testcase 7272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7273

Testcase 7273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7274

Testcase 7274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7275

Testcase 7275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7276

Testcase 7276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7277

Testcase 7277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7278

Testcase 7278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7279

Testcase 7279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7280

Testcase 7280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7281

Testcase 7281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7282

Testcase 7282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7283

Testcase 7283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7284

Testcase 7284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7285

Testcase 7285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7286

Testcase 7286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7287

Testcase 7287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7288

Testcase 7288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7289

Testcase 7289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7290

Testcase 7290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7291

Testcase 7291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7292

Testcase 7292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7293

Testcase 7293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7294

Testcase 7294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7295

Testcase 7295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7296

Testcase 7296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7297

Testcase 7297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc7298

Testcase 7298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7299

Testcase 7299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7300

Testcase 7300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7301

Testcase 7301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7302

Testcase 7302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7303

Testcase 7303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7304

Testcase 7304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7305

Testcase 7305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7306

Testcase 7306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7307

Testcase 7307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7308

Testcase 7308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7309

Testcase 7309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7310

Testcase 7310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7311

Testcase 7311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7312

Testcase 7312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7313

Testcase 7313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7314

Testcase 7314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7315

Testcase 7315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7316

Testcase 7316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7317

Testcase 7317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7318

Testcase 7318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7319

Testcase 7319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7320

Testcase 7320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7321

Testcase 7321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7322

Testcase 7322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7323

Testcase 7323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7324

Testcase 7324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7325

Testcase 7325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7326

Testcase 7326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7327

Testcase 7327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7328

Testcase 7328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7329

Testcase 7329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7330

Testcase 7330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7331

Testcase 7331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7332

Testcase 7332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7333

Testcase 7333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7334

Testcase 7334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7335

Testcase 7335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7336

Testcase 7336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7337

Testcase 7337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7338

Testcase 7338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7339

Testcase 7339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7340

Testcase 7340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7341

Testcase 7341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7342

Testcase 7342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7343

Testcase 7343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7344

Testcase 7344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7345

Testcase 7345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7346

Testcase 7346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7347

Testcase 7347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7348

Testcase 7348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7349

Testcase 7349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7350

Testcase 7350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7351

Testcase 7351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7352

Testcase 7352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7353

Testcase 7353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7354

Testcase 7354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7355

Testcase 7355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7356

Testcase 7356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7357

Testcase 7357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7358

Testcase 7358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7359

Testcase 7359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7360

Testcase 7360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7361

Testcase 7361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7362

Testcase 7362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7363

Testcase 7363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7364

Testcase 7364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7365

Testcase 7365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7366

Testcase 7366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7367

Testcase 7367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7368

Testcase 7368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7369

Testcase 7369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7370

Testcase 7370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7371

Testcase 7371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7372

Testcase 7372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7373

Testcase 7373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7374

Testcase 7374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7375

Testcase 7375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7376

Testcase 7376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7377

Testcase 7377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7378

Testcase 7378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc7379

Testcase 7379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7380

Testcase 7380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7381

Testcase 7381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7382

Testcase 7382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7383

Testcase 7383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7384

Testcase 7384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7385

Testcase 7385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7386

Testcase 7386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7387

Testcase 7387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7388

Testcase 7388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7389

Testcase 7389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7390

Testcase 7390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7391

Testcase 7391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7392

Testcase 7392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7393

Testcase 7393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7394

Testcase 7394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7395

Testcase 7395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7396

Testcase 7396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7397

Testcase 7397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7398

Testcase 7398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7399

Testcase 7399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7400

Testcase 7400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7401

Testcase 7401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7402

Testcase 7402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7403

Testcase 7403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7404

Testcase 7404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7405

Testcase 7405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7406

Testcase 7406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7407

Testcase 7407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7408

Testcase 7408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7409

Testcase 7409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7410

Testcase 7410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7411

Testcase 7411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7412

Testcase 7412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7413

Testcase 7413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7414

Testcase 7414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7415

Testcase 7415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7416

Testcase 7416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7417

Testcase 7417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7418

Testcase 7418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7419

Testcase 7419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7420

Testcase 7420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7421

Testcase 7421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7422

Testcase 7422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7423

Testcase 7423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7424

Testcase 7424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7425

Testcase 7425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7426

Testcase 7426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7427

Testcase 7427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7428

Testcase 7428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7429

Testcase 7429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7430

Testcase 7430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7431

Testcase 7431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7432

Testcase 7432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7433

Testcase 7433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7434

Testcase 7434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7435

Testcase 7435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7436

Testcase 7436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7437

Testcase 7437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7438

Testcase 7438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7439

Testcase 7439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7440

Testcase 7440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7441

Testcase 7441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7442

Testcase 7442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7443

Testcase 7443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7444

Testcase 7444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7445

Testcase 7445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7446

Testcase 7446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7447

Testcase 7447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7448

Testcase 7448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7449

Testcase 7449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7450

Testcase 7450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7451

Testcase 7451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7452

Testcase 7452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7453

Testcase 7453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7454

Testcase 7454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7455

Testcase 7455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7456

Testcase 7456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7457

Testcase 7457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7458

Testcase 7458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7459

Testcase 7459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc7460

Testcase 7460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7461

Testcase 7461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7462

Testcase 7462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7463

Testcase 7463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7464

Testcase 7464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7465

Testcase 7465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7466

Testcase 7466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7467

Testcase 7467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7468

Testcase 7468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7469

Testcase 7469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7470

Testcase 7470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7471

Testcase 7471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7472

Testcase 7472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7473

Testcase 7473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7474

Testcase 7474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7475

Testcase 7475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7476

Testcase 7476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7477

Testcase 7477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7478

Testcase 7478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7479

Testcase 7479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7480

Testcase 7480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7481

Testcase 7481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7482

Testcase 7482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7483

Testcase 7483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7484

Testcase 7484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7485

Testcase 7485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7486

Testcase 7486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7487

Testcase 7487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7488

Testcase 7488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7489

Testcase 7489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7490

Testcase 7490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7491

Testcase 7491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7492

Testcase 7492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7493

Testcase 7493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7494

Testcase 7494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7495

Testcase 7495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7496

Testcase 7496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7497

Testcase 7497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7498

Testcase 7498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7499

Testcase 7499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7500

Testcase 7500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7501

Testcase 7501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7502

Testcase 7502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7503

Testcase 7503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7504

Testcase 7504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7505

Testcase 7505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7506

Testcase 7506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7507

Testcase 7507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7508

Testcase 7508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7509

Testcase 7509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7510

Testcase 7510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7511

Testcase 7511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7512

Testcase 7512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7513

Testcase 7513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7514

Testcase 7514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7515

Testcase 7515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7516

Testcase 7516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7517

Testcase 7517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7518

Testcase 7518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7519

Testcase 7519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7520

Testcase 7520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7521

Testcase 7521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7522

Testcase 7522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7523

Testcase 7523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7524

Testcase 7524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7525

Testcase 7525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7526

Testcase 7526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7527

Testcase 7527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7528

Testcase 7528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7529

Testcase 7529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7530

Testcase 7530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7531

Testcase 7531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7532

Testcase 7532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7533

Testcase 7533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7534

Testcase 7534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7535

Testcase 7535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7536

Testcase 7536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7537

Testcase 7537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7538

Testcase 7538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7539

Testcase 7539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7540

Testcase 7540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc7541

Testcase 7541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7542

Testcase 7542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7543

Testcase 7543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7544

Testcase 7544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7545

Testcase 7545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7546

Testcase 7546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7547

Testcase 7547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7548

Testcase 7548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7549

Testcase 7549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7550

Testcase 7550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7551

Testcase 7551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7552

Testcase 7552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7553

Testcase 7553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7554

Testcase 7554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7555

Testcase 7555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7556

Testcase 7556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7557

Testcase 7557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7558

Testcase 7558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7559

Testcase 7559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7560

Testcase 7560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7561

Testcase 7561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7562

Testcase 7562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7563

Testcase 7563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7564

Testcase 7564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7565

Testcase 7565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7566

Testcase 7566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7567

Testcase 7567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7568

Testcase 7568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7569

Testcase 7569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7570

Testcase 7570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7571

Testcase 7571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7572

Testcase 7572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7573

Testcase 7573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7574

Testcase 7574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7575

Testcase 7575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7576

Testcase 7576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7577

Testcase 7577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7578

Testcase 7578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7579

Testcase 7579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7580

Testcase 7580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7581

Testcase 7581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7582

Testcase 7582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:44+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7583

Testcase 7583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7584

Testcase 7584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7585

Testcase 7585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7586

Testcase 7586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7587

Testcase 7587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7588

Testcase 7588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7589

Testcase 7589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7590

Testcase 7590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7591

Testcase 7591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7592

Testcase 7592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7593

Testcase 7593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7594

Testcase 7594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7595

Testcase 7595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7596

Testcase 7596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7597

Testcase 7597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7598

Testcase 7598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7599

Testcase 7599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7600

Testcase 7600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7601

Testcase 7601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7602

Testcase 7602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7603

Testcase 7603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7604

Testcase 7604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7605

Testcase 7605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7606

Testcase 7606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7607

Testcase 7607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7608

Testcase 7608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7609

Testcase 7609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7610

Testcase 7610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7611

Testcase 7611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7612

Testcase 7612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7613

Testcase 7613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7614

Testcase 7614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7615

Testcase 7615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7616

Testcase 7616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7617

Testcase 7617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7618

Testcase 7618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7619

Testcase 7619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7620

Testcase 7620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7621

Testcase 7621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc7622

Testcase 7622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7623

Testcase 7623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7624

Testcase 7624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7625

Testcase 7625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7626

Testcase 7626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7627

Testcase 7627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7628

Testcase 7628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7629

Testcase 7629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7630

Testcase 7630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7631

Testcase 7631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7632

Testcase 7632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7633

Testcase 7633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7634

Testcase 7634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7635

Testcase 7635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7636

Testcase 7636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7637

Testcase 7637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7638

Testcase 7638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7639

Testcase 7639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7640

Testcase 7640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7641

Testcase 7641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7642

Testcase 7642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7643

Testcase 7643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7644

Testcase 7644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7645

Testcase 7645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7646

Testcase 7646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7647

Testcase 7647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7648

Testcase 7648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7649

Testcase 7649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7650

Testcase 7650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7651

Testcase 7651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7652

Testcase 7652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7653

Testcase 7653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7654

Testcase 7654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7655

Testcase 7655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7656

Testcase 7656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7657

Testcase 7657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7658

Testcase 7658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7659

Testcase 7659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7660

Testcase 7660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7661

Testcase 7661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7662

Testcase 7662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7663

Testcase 7663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7664

Testcase 7664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7665

Testcase 7665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7666

Testcase 7666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7667

Testcase 7667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7668

Testcase 7668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7669

Testcase 7669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7670

Testcase 7670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7671

Testcase 7671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7672

Testcase 7672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7673

Testcase 7673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7674

Testcase 7674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7675

Testcase 7675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7676

Testcase 7676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7677

Testcase 7677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7678

Testcase 7678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7679

Testcase 7679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7680

Testcase 7680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7681

Testcase 7681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7682

Testcase 7682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7683

Testcase 7683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7684

Testcase 7684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7685

Testcase 7685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7686

Testcase 7686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7687

Testcase 7687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7688

Testcase 7688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7689

Testcase 7689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7690

Testcase 7690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7691

Testcase 7691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7692

Testcase 7692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7693

Testcase 7693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7694

Testcase 7694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7695

Testcase 7695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7696

Testcase 7696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7697

Testcase 7697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7698

Testcase 7698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7699

Testcase 7699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7700

Testcase 7700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7701

Testcase 7701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7702

Testcase 7702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc7703

Testcase 7703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7704

Testcase 7704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7705

Testcase 7705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7706

Testcase 7706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7707

Testcase 7707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7708

Testcase 7708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7709

Testcase 7709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7710

Testcase 7710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7711

Testcase 7711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7712

Testcase 7712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7713

Testcase 7713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7714

Testcase 7714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7715

Testcase 7715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7716

Testcase 7716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7717

Testcase 7717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7718

Testcase 7718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7719

Testcase 7719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7720

Testcase 7720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7721

Testcase 7721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7722

Testcase 7722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7723

Testcase 7723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7724

Testcase 7724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7725

Testcase 7725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7726

Testcase 7726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7727

Testcase 7727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7728

Testcase 7728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7729

Testcase 7729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7730

Testcase 7730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7731

Testcase 7731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7732

Testcase 7732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7733

Testcase 7733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7734

Testcase 7734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7735

Testcase 7735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7736

Testcase 7736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7737

Testcase 7737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7738

Testcase 7738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7739

Testcase 7739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7740

Testcase 7740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7741

Testcase 7741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7742

Testcase 7742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7743

Testcase 7743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7744

Testcase 7744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7745

Testcase 7745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7746

Testcase 7746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7747

Testcase 7747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7748

Testcase 7748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7749

Testcase 7749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7750

Testcase 7750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7751

Testcase 7751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7752

Testcase 7752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7753

Testcase 7753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7754

Testcase 7754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7755

Testcase 7755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7756

Testcase 7756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7757

Testcase 7757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7758

Testcase 7758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7759

Testcase 7759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7760

Testcase 7760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7761

Testcase 7761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7762

Testcase 7762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7763

Testcase 7763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7764

Testcase 7764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7765

Testcase 7765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7766

Testcase 7766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7767

Testcase 7767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7768

Testcase 7768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7769

Testcase 7769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7770

Testcase 7770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7771

Testcase 7771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7772

Testcase 7772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7773

Testcase 7773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7774

Testcase 7774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7775

Testcase 7775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7776

Testcase 7776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7777

Testcase 7777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7778

Testcase 7778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7779

Testcase 7779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7780

Testcase 7780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7781

Testcase 7781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7782

Testcase 7782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7783

Testcase 7783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc7784

Testcase 7784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7785

Testcase 7785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7786

Testcase 7786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7787

Testcase 7787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7788

Testcase 7788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7789

Testcase 7789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7790

Testcase 7790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7791

Testcase 7791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7792

Testcase 7792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7793

Testcase 7793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7794

Testcase 7794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7795

Testcase 7795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7796

Testcase 7796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7797

Testcase 7797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7798

Testcase 7798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7799

Testcase 7799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7800

Testcase 7800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7801

Testcase 7801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7802

Testcase 7802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7803

Testcase 7803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7804

Testcase 7804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7805

Testcase 7805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7806

Testcase 7806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7807

Testcase 7807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7808

Testcase 7808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7809

Testcase 7809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7810

Testcase 7810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7811

Testcase 7811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7812

Testcase 7812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7813

Testcase 7813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7814

Testcase 7814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7815

Testcase 7815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7816

Testcase 7816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7817

Testcase 7817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7818

Testcase 7818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7819

Testcase 7819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7820

Testcase 7820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7821

Testcase 7821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7822

Testcase 7822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7823

Testcase 7823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7824

Testcase 7824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7825

Testcase 7825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7826

Testcase 7826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7827

Testcase 7827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7828

Testcase 7828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7829

Testcase 7829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7830

Testcase 7830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7831

Testcase 7831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7832

Testcase 7832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7833

Testcase 7833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7834

Testcase 7834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7835

Testcase 7835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7836

Testcase 7836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7837

Testcase 7837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7838

Testcase 7838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7839

Testcase 7839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7840

Testcase 7840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7841

Testcase 7841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7842

Testcase 7842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7843

Testcase 7843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7844

Testcase 7844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7845

Testcase 7845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7846

Testcase 7846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7847

Testcase 7847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7848

Testcase 7848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7849

Testcase 7849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7850

Testcase 7850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7851

Testcase 7851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7852

Testcase 7852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7853

Testcase 7853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7854

Testcase 7854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7855

Testcase 7855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7856

Testcase 7856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7857

Testcase 7857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7858

Testcase 7858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7859

Testcase 7859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7860

Testcase 7860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7861

Testcase 7861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7862

Testcase 7862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7863

Testcase 7863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7864

Testcase 7864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc7865

Testcase 7865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7866

Testcase 7866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7867

Testcase 7867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7868

Testcase 7868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7869

Testcase 7869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7870

Testcase 7870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7871

Testcase 7871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7872

Testcase 7872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7873

Testcase 7873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7874

Testcase 7874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7875

Testcase 7875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7876

Testcase 7876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7877

Testcase 7877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7878

Testcase 7878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7879

Testcase 7879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7880

Testcase 7880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7881

Testcase 7881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7882

Testcase 7882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7883

Testcase 7883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7884

Testcase 7884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7885

Testcase 7885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7886

Testcase 7886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7887

Testcase 7887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7888

Testcase 7888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7889

Testcase 7889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7890

Testcase 7890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7891

Testcase 7891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7892

Testcase 7892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7893

Testcase 7893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7894

Testcase 7894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7895

Testcase 7895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7896

Testcase 7896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7897

Testcase 7897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7898

Testcase 7898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7899

Testcase 7899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7900

Testcase 7900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7901

Testcase 7901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7902

Testcase 7902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7903

Testcase 7903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7904

Testcase 7904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7905

Testcase 7905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7906

Testcase 7906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7907

Testcase 7907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7908

Testcase 7908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7909

Testcase 7909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7910

Testcase 7910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7911

Testcase 7911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7912

Testcase 7912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7913

Testcase 7913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7914

Testcase 7914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7915

Testcase 7915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7916

Testcase 7916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7917

Testcase 7917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7918

Testcase 7918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7919

Testcase 7919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7920

Testcase 7920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7921

Testcase 7921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7922

Testcase 7922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7923

Testcase 7923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7924

Testcase 7924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7925

Testcase 7925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7926

Testcase 7926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7927

Testcase 7927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7928

Testcase 7928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7929

Testcase 7929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7930

Testcase 7930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7931

Testcase 7931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7932

Testcase 7932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc7933

Testcase 7933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7934

Testcase 7934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7935

Testcase 7935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7936

Testcase 7936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7937

Testcase 7937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7938

Testcase 7938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7939

Testcase 7939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7940

Testcase 7940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7941

Testcase 7941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7942

Testcase 7942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7943

Testcase 7943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7944

Testcase 7944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7945

Testcase 7945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc7946

Testcase 7946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7947

Testcase 7947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7948

Testcase 7948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7949

Testcase 7949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7950

Testcase 7950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7951

Testcase 7951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7952

Testcase 7952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7953

Testcase 7953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7954

Testcase 7954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7955

Testcase 7955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7956

Testcase 7956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7957

Testcase 7957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7958

Testcase 7958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7959

Testcase 7959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7960

Testcase 7960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7961

Testcase 7961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7962

Testcase 7962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7963

Testcase 7963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7964

Testcase 7964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7965

Testcase 7965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7966

Testcase 7966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7967

Testcase 7967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7968

Testcase 7968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7969

Testcase 7969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7970

Testcase 7970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7971

Testcase 7971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7972

Testcase 7972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7973

Testcase 7973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7974

Testcase 7974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7975

Testcase 7975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7976

Testcase 7976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7977

Testcase 7977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7978

Testcase 7978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7979

Testcase 7979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7980

Testcase 7980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7981

Testcase 7981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7982

Testcase 7982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7983

Testcase 7983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7984

Testcase 7984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7985

Testcase 7985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7986

Testcase 7986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7987

Testcase 7987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7988

Testcase 7988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7989

Testcase 7989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7990

Testcase 7990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7991

Testcase 7991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7992

Testcase 7992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7993

Testcase 7993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7994

Testcase 7994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7995

Testcase 7995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7996

Testcase 7996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7997

Testcase 7997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7998

Testcase 7998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc7999

Testcase 7999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8000

Testcase 8000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8001

Testcase 8001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8002

Testcase 8002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8003

Testcase 8003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8004

Testcase 8004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8005

Testcase 8005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8006

Testcase 8006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8007

Testcase 8007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8008

Testcase 8008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8009

Testcase 8009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8010

Testcase 8010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8011

Testcase 8011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8012

Testcase 8012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8013

Testcase 8013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8014

Testcase 8014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8015

Testcase 8015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8016

Testcase 8016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8017

Testcase 8017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8018

Testcase 8018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8019

Testcase 8019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8020

Testcase 8020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8021

Testcase 8021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8022

Testcase 8022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8023

Testcase 8023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8024

Testcase 8024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8025

Testcase 8025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8026

Testcase 8026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc8027

Testcase 8027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8028

Testcase 8028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8029

Testcase 8029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8030

Testcase 8030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8031

Testcase 8031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8032

Testcase 8032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8033

Testcase 8033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8034

Testcase 8034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8035

Testcase 8035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8036

Testcase 8036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8037

Testcase 8037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8038

Testcase 8038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8039

Testcase 8039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8040

Testcase 8040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8041

Testcase 8041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8042

Testcase 8042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8043

Testcase 8043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8044

Testcase 8044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8045

Testcase 8045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8046

Testcase 8046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8047

Testcase 8047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8048

Testcase 8048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8049

Testcase 8049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8050

Testcase 8050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8051

Testcase 8051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8052

Testcase 8052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8053

Testcase 8053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8054

Testcase 8054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8055

Testcase 8055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8056

Testcase 8056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8057

Testcase 8057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8058

Testcase 8058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8059

Testcase 8059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8060

Testcase 8060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8061

Testcase 8061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8062

Testcase 8062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8063

Testcase 8063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8064

Testcase 8064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8065

Testcase 8065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8066

Testcase 8066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8067

Testcase 8067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8068

Testcase 8068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8069

Testcase 8069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8070

Testcase 8070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8071

Testcase 8071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8072

Testcase 8072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8073

Testcase 8073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8074

Testcase 8074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8075

Testcase 8075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8076

Testcase 8076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8077

Testcase 8077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8078

Testcase 8078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8079

Testcase 8079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8080

Testcase 8080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8081

Testcase 8081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8082

Testcase 8082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8083

Testcase 8083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8084

Testcase 8084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8085

Testcase 8085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8086

Testcase 8086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8087

Testcase 8087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8088

Testcase 8088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8089

Testcase 8089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8090

Testcase 8090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8091

Testcase 8091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8092

Testcase 8092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8093

Testcase 8093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8094

Testcase 8094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8095

Testcase 8095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8096

Testcase 8096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8097

Testcase 8097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8098

Testcase 8098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8099

Testcase 8099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8100

Testcase 8100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8101

Testcase 8101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8102

Testcase 8102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8103

Testcase 8103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8104

Testcase 8104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8105

Testcase 8105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8106

Testcase 8106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("Certificate is missing required extension")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8107

Testcase 8107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc8108

Testcase 8108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8109

Testcase 8109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8110

Testcase 8110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8111

Testcase 8111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8112

Testcase 8112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8113

Testcase 8113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8114

Testcase 8114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8115

Testcase 8115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8116

Testcase 8116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8117

Testcase 8117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8118

Testcase 8118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8119

Testcase 8119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8120

Testcase 8120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8121

Testcase 8121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8122

Testcase 8122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8123

Testcase 8123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8124

Testcase 8124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8125

Testcase 8125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8126

Testcase 8126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8127

Testcase 8127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8128

Testcase 8128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8129

Testcase 8129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8130

Testcase 8130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8131

Testcase 8131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8132

Testcase 8132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8133

Testcase 8133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8134

Testcase 8134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8135

Testcase 8135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8136

Testcase 8136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8137

Testcase 8137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8138

Testcase 8138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8139

Testcase 8139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8140

Testcase 8140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8141

Testcase 8141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8142

Testcase 8142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8143

Testcase 8143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8144

Testcase 8144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8145

Testcase 8145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8146

Testcase 8146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8147

Testcase 8147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8148

Testcase 8148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8149

Testcase 8149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8150

Testcase 8150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8151

Testcase 8151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8152

Testcase 8152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8153

Testcase 8153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8154

Testcase 8154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8155

Testcase 8155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8156

Testcase 8156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8157

Testcase 8157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8158

Testcase 8158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8159

Testcase 8159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8160

Testcase 8160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8161

Testcase 8161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8162

Testcase 8162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8163

Testcase 8163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8164

Testcase 8164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8165

Testcase 8165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8166

Testcase 8166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8167

Testcase 8167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8168

Testcase 8168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8169

Testcase 8169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8170

Testcase 8170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8171

Testcase 8171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8172

Testcase 8172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8173

Testcase 8173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8174

Testcase 8174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8175

Testcase 8175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8176

Testcase 8176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8177

Testcase 8177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8178

Testcase 8178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8179

Testcase 8179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8180

Testcase 8180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8181

Testcase 8181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8182

Testcase 8182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8183

Testcase 8183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8184

Testcase 8184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8185

Testcase 8185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8186

Testcase 8186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8187

Testcase 8187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8188

Testcase 8188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include:
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc8189

Testcase 8189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8190

Testcase 8190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8191

Testcase 8191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8192

Testcase 8192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8193

Testcase 8193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8194

Testcase 8194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8195

Testcase 8195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8196

Testcase 8196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8197

Testcase 8197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8198

Testcase 8198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8199

Testcase 8199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8200

Testcase 8200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8201

Testcase 8201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8202

Testcase 8202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8203

Testcase 8203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8204

Testcase 8204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8205

Testcase 8205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8206

Testcase 8206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8207

Testcase 8207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8208

Testcase 8208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8209

Testcase 8209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8210

Testcase 8210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8211

Testcase 8211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8212

Testcase 8212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8213

Testcase 8213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8214

Testcase 8214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8215

Testcase 8215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8216

Testcase 8216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8217

Testcase 8217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8218

Testcase 8218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8219

Testcase 8219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8220

Testcase 8220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8221

Testcase 8221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8222

Testcase 8222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8223

Testcase 8223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8224

Testcase 8224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8225

Testcase 8225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8226

Testcase 8226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8227

Testcase 8227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8228

Testcase 8228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8229

Testcase 8229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8230

Testcase 8230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8231

Testcase 8231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8232

Testcase 8232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8233

Testcase 8233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8234

Testcase 8234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8235

Testcase 8235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8236

Testcase 8236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8237

Testcase 8237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8238

Testcase 8238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8239

Testcase 8239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8240

Testcase 8240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8241

Testcase 8241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8242

Testcase 8242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8243

Testcase 8243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8244

Testcase 8244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8245

Testcase 8245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8246

Testcase 8246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8247

Testcase 8247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8248

Testcase 8248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8249

Testcase 8249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8250

Testcase 8250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8251

Testcase 8251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8252

Testcase 8252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8253

Testcase 8253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8254

Testcase 8254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8255

Testcase 8255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8256

Testcase 8256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8257

Testcase 8257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8258

Testcase 8258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8259

Testcase 8259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8260

Testcase 8260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8261

Testcase 8261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8262

Testcase 8262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8263

Testcase 8263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8264

Testcase 8264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8265

Testcase 8265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8266

Testcase 8266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8267

Testcase 8267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8268

Testcase 8268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8269

Testcase 8269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc8270

Testcase 8270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8271

Testcase 8271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8272

Testcase 8272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8273

Testcase 8273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8274

Testcase 8274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8275

Testcase 8275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8276

Testcase 8276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8277

Testcase 8277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8278

Testcase 8278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8279

Testcase 8279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8280

Testcase 8280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8281

Testcase 8281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8282

Testcase 8282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8283

Testcase 8283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8284

Testcase 8284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8285

Testcase 8285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8286

Testcase 8286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8287

Testcase 8287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8288

Testcase 8288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8289

Testcase 8289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8290

Testcase 8290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8291

Testcase 8291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8292

Testcase 8292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8293

Testcase 8293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8294

Testcase 8294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8295

Testcase 8295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8296

Testcase 8296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8297

Testcase 8297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8298

Testcase 8298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8299

Testcase 8299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8300

Testcase 8300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8301

Testcase 8301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8302

Testcase 8302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8303

Testcase 8303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8304

Testcase 8304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8305

Testcase 8305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8306

Testcase 8306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8307

Testcase 8307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8308

Testcase 8308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8309

Testcase 8309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8310

Testcase 8310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8311

Testcase 8311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8312

Testcase 8312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8313

Testcase 8313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8314

Testcase 8314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8315

Testcase 8315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8316

Testcase 8316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8317

Testcase 8317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8318

Testcase 8318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8319

Testcase 8319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8320

Testcase 8320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8321

Testcase 8321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8322

Testcase 8322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8323

Testcase 8323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8324

Testcase 8324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8325

Testcase 8325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8326

Testcase 8326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8327

Testcase 8327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8328

Testcase 8328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8329

Testcase 8329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8330

Testcase 8330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8331

Testcase 8331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8332

Testcase 8332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8333

Testcase 8333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8334

Testcase 8334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8335

Testcase 8335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8336

Testcase 8336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8337

Testcase 8337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8338

Testcase 8338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8339

Testcase 8339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8340

Testcase 8340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8341

Testcase 8341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8342

Testcase 8342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8343

Testcase 8343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8344

Testcase 8344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8345

Testcase 8345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8346

Testcase 8346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8347

Testcase 8347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8348

Testcase 8348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8349

Testcase 8349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8350

Testcase 8350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc8351

Testcase 8351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8352

Testcase 8352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8353

Testcase 8353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8354

Testcase 8354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8355

Testcase 8355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8356

Testcase 8356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8357

Testcase 8357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8358

Testcase 8358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8359

Testcase 8359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8360

Testcase 8360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8361

Testcase 8361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8362

Testcase 8362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8363

Testcase 8363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8364

Testcase 8364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8365

Testcase 8365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8366

Testcase 8366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8367

Testcase 8367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8368

Testcase 8368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8369

Testcase 8369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8370

Testcase 8370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8371

Testcase 8371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8372

Testcase 8372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8373

Testcase 8373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8374

Testcase 8374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8375

Testcase 8375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8376

Testcase 8376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8377

Testcase 8377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8378

Testcase 8378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8379

Testcase 8379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8380

Testcase 8380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8381

Testcase 8381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8382

Testcase 8382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8383

Testcase 8383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8384

Testcase 8384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8385

Testcase 8385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8386

Testcase 8386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8387

Testcase 8387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8388

Testcase 8388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8389

Testcase 8389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8390

Testcase 8390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8391

Testcase 8391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8392

Testcase 8392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8393

Testcase 8393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8394

Testcase 8394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8395

Testcase 8395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8396

Testcase 8396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8397

Testcase 8397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8398

Testcase 8398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8399

Testcase 8399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8400

Testcase 8400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8401

Testcase 8401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8402

Testcase 8402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8403

Testcase 8403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8404

Testcase 8404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8405

Testcase 8405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8406

Testcase 8406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8407

Testcase 8407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8408

Testcase 8408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8409

Testcase 8409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8410

Testcase 8410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8411

Testcase 8411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8412

Testcase 8412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8413

Testcase 8413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8414

Testcase 8414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8415

Testcase 8415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8416

Testcase 8416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8417

Testcase 8417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8418

Testcase 8418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8419

Testcase 8419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8420

Testcase 8420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8421

Testcase 8421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8422

Testcase 8422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8423

Testcase 8423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8424

Testcase 8424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8425

Testcase 8425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8426

Testcase 8426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8427

Testcase 8427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8428

Testcase 8428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8429

Testcase 8429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8430

Testcase 8430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8431

Testcase 8431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: test.localhost
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc8432

Testcase 8432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8433

Testcase 8433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8434

Testcase 8434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8435

Testcase 8435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8436

Testcase 8436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8437

Testcase 8437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8438

Testcase 8438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8439

Testcase 8439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8440

Testcase 8440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8441

Testcase 8441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8442

Testcase 8442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8443

Testcase 8443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8444

Testcase 8444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8445

Testcase 8445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8446

Testcase 8446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8447

Testcase 8447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8448

Testcase 8448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8449

Testcase 8449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8450

Testcase 8450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8451

Testcase 8451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8452

Testcase 8452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8453

Testcase 8453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8454

Testcase 8454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8455

Testcase 8455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8456

Testcase 8456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8457

Testcase 8457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8458

Testcase 8458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8459

Testcase 8459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8460

Testcase 8460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8461

Testcase 8461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8462

Testcase 8462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8463

Testcase 8463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8464

Testcase 8464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8465

Testcase 8465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8466

Testcase 8466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8467

Testcase 8467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8468

Testcase 8468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8469

Testcase 8469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8470

Testcase 8470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8471

Testcase 8471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8472

Testcase 8472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8473

Testcase 8473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8474

Testcase 8474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8475

Testcase 8475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8476

Testcase 8476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8477

Testcase 8477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8478

Testcase 8478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8479

Testcase 8479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8480

Testcase 8480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8481

Testcase 8481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8482

Testcase 8482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8483

Testcase 8483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8484

Testcase 8484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8485

Testcase 8485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8486

Testcase 8486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8487

Testcase 8487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8488

Testcase 8488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8489

Testcase 8489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8490

Testcase 8490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8491

Testcase 8491 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8492

Testcase 8492 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8493

Testcase 8493 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8494

Testcase 8494 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8495

Testcase 8495 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8496

Testcase 8496 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8497

Testcase 8497 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8498

Testcase 8498 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8499

Testcase 8499 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8500

Testcase 8500 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8501

Testcase 8501 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8502

Testcase 8502 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8503

Testcase 8503 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8504

Testcase 8504 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8505

Testcase 8505 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8506

Testcase 8506 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8507

Testcase 8507 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8508

Testcase 8508 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8509

Testcase 8509 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8510

Testcase 8510 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8511

Testcase 8511 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8512

Testcase 8512 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc8513

Testcase 8513 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8514

Testcase 8514 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8515

Testcase 8515 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8516

Testcase 8516 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8517

Testcase 8517 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8518

Testcase 8518 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8519

Testcase 8519 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8520

Testcase 8520 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8521

Testcase 8521 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8522

Testcase 8522 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8523

Testcase 8523 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8524

Testcase 8524 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8525

Testcase 8525 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8526

Testcase 8526 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8527

Testcase 8527 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8528

Testcase 8528 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8529

Testcase 8529 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8530

Testcase 8530 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8531

Testcase 8531 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8532

Testcase 8532 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8533

Testcase 8533 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8534

Testcase 8534 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8535

Testcase 8535 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8536

Testcase 8536 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8537

Testcase 8537 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8538

Testcase 8538 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8539

Testcase 8539 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8540

Testcase 8540 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8541

Testcase 8541 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8542

Testcase 8542 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8543

Testcase 8543 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8544

Testcase 8544 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8545

Testcase 8545 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8546

Testcase 8546 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8547

Testcase 8547 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8548

Testcase 8548 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8549

Testcase 8549 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8550

Testcase 8550 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8551

Testcase 8551 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8552

Testcase 8552 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8553

Testcase 8553 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8554

Testcase 8554 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8555

Testcase 8555 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8556

Testcase 8556 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8557

Testcase 8557 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8558

Testcase 8558 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8559

Testcase 8559 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8560

Testcase 8560 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8561

Testcase 8561 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8562

Testcase 8562 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8563

Testcase 8563 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8564

Testcase 8564 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8565

Testcase 8565 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8566

Testcase 8566 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8567

Testcase 8567 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8568

Testcase 8568 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8569

Testcase 8569 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8570

Testcase 8570 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8571

Testcase 8571 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8572

Testcase 8572 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8573

Testcase 8573 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8574

Testcase 8574 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8575

Testcase 8575 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8576

Testcase 8576 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8577

Testcase 8577 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8578

Testcase 8578 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8579

Testcase 8579 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8580

Testcase 8580 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8581

Testcase 8581 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8582

Testcase 8582 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8583

Testcase 8583 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8584

Testcase 8584 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8585

Testcase 8585 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8586

Testcase 8586 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8587

Testcase 8587 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8588

Testcase 8588 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8589

Testcase 8589 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8590

Testcase 8590 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8591

Testcase 8591 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8592

Testcase 8592 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8593

Testcase 8593 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc8594

Testcase 8594 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8595

Testcase 8595 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8596

Testcase 8596 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8597

Testcase 8597 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8598

Testcase 8598 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8599

Testcase 8599 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8600

Testcase 8600 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8601

Testcase 8601 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8602

Testcase 8602 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8603

Testcase 8603 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8604

Testcase 8604 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8605

Testcase 8605 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8606

Testcase 8606 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8607

Testcase 8607 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8608

Testcase 8608 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8609

Testcase 8609 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8610

Testcase 8610 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8611

Testcase 8611 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8612

Testcase 8612 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8613

Testcase 8613 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8614

Testcase 8614 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8615

Testcase 8615 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8616

Testcase 8616 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8617

Testcase 8617 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8618

Testcase 8618 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8619

Testcase 8619 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8620

Testcase 8620 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8621

Testcase 8621 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8622

Testcase 8622 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8623

Testcase 8623 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8624

Testcase 8624 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8625

Testcase 8625 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8626

Testcase 8626 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8627

Testcase 8627 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8628

Testcase 8628 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8629

Testcase 8629 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8630

Testcase 8630 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8631

Testcase 8631 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8632

Testcase 8632 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8633

Testcase 8633 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8634

Testcase 8634 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8635

Testcase 8635 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8636

Testcase 8636 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8637

Testcase 8637 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8638

Testcase 8638 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8639

Testcase 8639 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8640

Testcase 8640 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8641

Testcase 8641 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8642

Testcase 8642 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8643

Testcase 8643 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8644

Testcase 8644 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8645

Testcase 8645 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8646

Testcase 8646 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8647

Testcase 8647 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8648

Testcase 8648 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8649

Testcase 8649 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8650

Testcase 8650 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8651

Testcase 8651 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8652

Testcase 8652 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8653

Testcase 8653 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8654

Testcase 8654 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8655

Testcase 8655 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8656

Testcase 8656 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8657

Testcase 8657 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8658

Testcase 8658 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8659

Testcase 8659 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8660

Testcase 8660 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8661

Testcase 8661 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	❌ (unexpected failure)	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	❌ (unexpected failure)	UnknownIssuer

bettertls::nameconstraints::tc8662

Testcase 8662 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8663

Testcase 8663 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8664

Testcase 8664 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8665

Testcase 8665 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8666

Testcase 8666 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8667

Testcase 8667 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8668

Testcase 8668 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8669

Testcase 8669 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8670

Testcase 8670 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8671

Testcase 8671 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8672

Testcase 8672 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8673

Testcase 8673 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8674

Testcase 8674 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The X.509 certificate provided is not valid for 127.0.0.1. Valid hostnames include: bad.example.com
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	🚧	implementation requires DNS peer names

bettertls::nameconstraints::tc8675

Testcase 8675 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8676

Testcase 8676 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8677

Testcase 8677 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8678

Testcase 8678 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8679

Testcase 8679 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8680

Testcase 8680 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8681

Testcase 8681 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8682

Testcase 8682 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8683

Testcase 8683 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8684

Testcase 8684 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8685

Testcase 8685 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8686

Testcase 8686 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8687

Testcase 8687 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8688

Testcase 8688 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8689

Testcase 8689 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8690

Testcase 8690 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8691

Testcase 8691 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8692

Testcase 8692 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8693

Testcase 8693 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8694

Testcase 8694 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8695

Testcase 8695 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8696

Testcase 8696 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8697

Testcase 8697 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8698

Testcase 8698 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8699

Testcase 8699 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8700

Testcase 8700 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8701

Testcase 8701 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8702

Testcase 8702 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8703

Testcase 8703 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8704

Testcase 8704 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8705

Testcase 8705 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8706

Testcase 8706 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8707

Testcase 8707 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8708

Testcase 8708 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8709

Testcase 8709 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8710

Testcase 8710 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8711

Testcase 8711 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8712

Testcase 8712 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8713

Testcase 8713 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8714

Testcase 8714 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8715

Testcase 8715 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8716

Testcase 8716 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8717

Testcase 8717 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8718

Testcase 8718 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8719

Testcase 8719 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8720

Testcase 8720 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8721

Testcase 8721 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8722

Testcase 8722 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8723

Testcase 8723 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8724

Testcase 8724 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8725

Testcase 8725 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8726

Testcase 8726 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8727

Testcase 8727 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8728

Testcase 8728 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8729

Testcase 8729 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8730

Testcase 8730 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8731

Testcase 8731 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8732

Testcase 8732 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8733

Testcase 8733 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8734

Testcase 8734 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8735

Testcase 8735 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8736

Testcase 8736 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8737

Testcase 8737 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8738

Testcase 8738 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8739

Testcase 8739 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8740

Testcase 8740 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8741

Testcase 8741 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8742

Testcase 8742 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8743

Testcase 8743 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8744

Testcase 8744 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8745

Testcase 8745 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8746

Testcase 8746 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8747

Testcase 8747 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8748

Testcase 8748 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8749

Testcase 8749 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8750

Testcase 8750 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8751

Testcase 8751 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8752

Testcase 8752 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8753

Testcase 8753 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8754

Testcase 8754 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8755

Testcase 8755 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8756

Testcase 8756 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8757

Testcase 8757 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8758

Testcase 8758 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8759

Testcase 8759 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8760

Testcase 8760 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8761

Testcase 8761 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8762

Testcase 8762 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8763

Testcase 8763 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8764

Testcase 8764 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8765

Testcase 8765 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8766

Testcase 8766 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8767

Testcase 8767 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8768

Testcase 8768 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8769

Testcase 8769 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8770

Testcase 8770 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8771

Testcase 8771 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8772

Testcase 8772 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8773

Testcase 8773 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8774

Testcase 8774 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8775

Testcase 8775 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8776

Testcase 8776 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8777

Testcase 8777 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8778

Testcase 8778 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8779

Testcase 8779 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8780

Testcase 8780 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8781

Testcase 8781 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8782

Testcase 8782 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8783

Testcase 8783 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8784

Testcase 8784 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8785

Testcase 8785 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8786

Testcase 8786 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8787

Testcase 8787 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8788

Testcase 8788 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8789

Testcase 8789 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8790

Testcase 8790 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8791

Testcase 8791 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8792

Testcase 8792 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8793

Testcase 8793 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8794

Testcase 8794 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8795

Testcase 8795 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8796

Testcase 8796 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8797

Testcase 8797 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8798

Testcase 8798 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8799

Testcase 8799 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8800

Testcase 8800 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8801

Testcase 8801 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8802

Testcase 8802 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8803

Testcase 8803 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8804

Testcase 8804 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8805

Testcase 8805 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8806

Testcase 8806 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8807

Testcase 8807 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8808

Testcase 8808 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8809

Testcase 8809 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8810

Testcase 8810 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8811

Testcase 8811 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8812

Testcase 8812 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8813

Testcase 8813 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8814

Testcase 8814 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8815

Testcase 8815 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8816

Testcase 8816 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8817

Testcase 8817 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8818

Testcase 8818 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8819

Testcase 8819 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8820

Testcase 8820 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8821

Testcase 8821 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8822

Testcase 8822 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8823

Testcase 8823 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8824

Testcase 8824 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8825

Testcase 8825 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8826

Testcase 8826 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8827

Testcase 8827 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8828

Testcase 8828 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8829

Testcase 8829 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8830

Testcase 8830 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8831

Testcase 8831 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8832

Testcase 8832 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8833

Testcase 8833 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8834

Testcase 8834 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8835

Testcase 8835 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8836

Testcase 8836 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8837

Testcase 8837 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8838

Testcase 8838 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8839

Testcase 8839 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8840

Testcase 8840 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8841

Testcase 8841 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8842

Testcase 8842 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8843

Testcase 8843 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8844

Testcase 8844 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8845

Testcase 8845 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8846

Testcase 8846 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8847

Testcase 8847 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8848

Testcase 8848 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8849

Testcase 8849 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8850

Testcase 8850 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8851

Testcase 8851 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8852

Testcase 8852 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8853

Testcase 8853 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8854

Testcase 8854 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8855

Testcase 8855 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8856

Testcase 8856 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8857

Testcase 8857 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8858

Testcase 8858 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8859

Testcase 8859 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8860

Testcase 8860 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8861

Testcase 8861 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8862

Testcase 8862 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8863

Testcase 8863 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8864

Testcase 8864 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	excluded subtree violation
openssl-3.3.2	✅	excluded subtree violation
openssl-3.2.3	✅	excluded subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	excluded subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("excluded name constraint matched SAN"))
openssl-3.1.7	✅	excluded subtree violation
openssl-1.1	✅	excluded subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8865

Testcase 8865 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8866

Testcase 8866 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8867

Testcase 8867 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8868

Testcase 8868 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8869

Testcase 8869 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8870

Testcase 8870 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8871

Testcase 8871 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8872

Testcase 8872 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8873

Testcase 8873 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8874

Testcase 8874 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8875

Testcase 8875 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8876

Testcase 8876 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8877

Testcase 8877 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8878

Testcase 8878 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8879

Testcase 8879 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8880

Testcase 8880 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	IP address mismatch
openssl-3.3.2	✅	IP address mismatch
openssl-3.2.3	✅	IP address mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	IP address mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	IP address mismatch
openssl-1.1	✅	IP address mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8881

Testcase 8881 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8882

Testcase 8882 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8883

Testcase 8883 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8884

Testcase 8884 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8885

Testcase 8885 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8886

Testcase 8886 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8887

Testcase 8887 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8888

Testcase 8888 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8889

Testcase 8889 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8890

Testcase 8890 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8891

Testcase 8891 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8892

Testcase 8892 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8893

Testcase 8893 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8894

Testcase 8894 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8895

Testcase 8895 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8896

Testcase 8896 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8897

Testcase 8897 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8898

Testcase 8898 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8899

Testcase 8899 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8900

Testcase 8900 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8901

Testcase 8901 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8902

Testcase 8902 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8903

Testcase 8903 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8904

Testcase 8904 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8905

Testcase 8905 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8906

Testcase 8906 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8907

Testcase 8907 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8908

Testcase 8908 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8909

Testcase 8909 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8910

Testcase 8910 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8911

Testcase 8911 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8912

Testcase 8912 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8913

Testcase 8913 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8914

Testcase 8914 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8915

Testcase 8915 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8916

Testcase 8916 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8917

Testcase 8917 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8918

Testcase 8918 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8919

Testcase 8919 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8920

Testcase 8920 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8921

Testcase 8921 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8922

Testcase 8922 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8923

Testcase 8923 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8924

Testcase 8924 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8925

Testcase 8925 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8926

Testcase 8926 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8927

Testcase 8927 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8928

Testcase 8928 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8929

Testcase 8929 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8930

Testcase 8930 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8931

Testcase 8931 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8932

Testcase 8932 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8933

Testcase 8933 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8934

Testcase 8934 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8935

Testcase 8935 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8936

Testcase 8936 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8937

Testcase 8937 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8938

Testcase 8938 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8939

Testcase 8939 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8940

Testcase 8940 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8941

Testcase 8941 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8942

Testcase 8942 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8943

Testcase 8943 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8944

Testcase 8944 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8945

Testcase 8945 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8946

Testcase 8946 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8947

Testcase 8947 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8948

Testcase 8948 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8949

Testcase 8949 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8950

Testcase 8950 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8951

Testcase 8951 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8952

Testcase 8952 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8953

Testcase 8953 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8954

Testcase 8954 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8955

Testcase 8955 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8956

Testcase 8956 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8957

Testcase 8957 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8958

Testcase 8958 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8959

Testcase 8959 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8960

Testcase 8960 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8961

Testcase 8961 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8962

Testcase 8962 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8963

Testcase 8963 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8964

Testcase 8964 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8965

Testcase 8965 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8966

Testcase 8966 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8967

Testcase 8967 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8968

Testcase 8968 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8969

Testcase 8969 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8970

Testcase 8970 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8971

Testcase 8971 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8972

Testcase 8972 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8973

Testcase 8973 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8974

Testcase 8974 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8975

Testcase 8975 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8976

Testcase 8976 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8977

Testcase 8977 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8978

Testcase 8978 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8979

Testcase 8979 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8980

Testcase 8980 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8981

Testcase 8981 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8982

Testcase 8982 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8983

Testcase 8983 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8984

Testcase 8984 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8985

Testcase 8985 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8986

Testcase 8986 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8987

Testcase 8987 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8988

Testcase 8988 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8989

Testcase 8989 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8990

Testcase 8990 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8991

Testcase 8991 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8992

Testcase 8992 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8993

Testcase 8993 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8994

Testcase 8994 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8995

Testcase 8995 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8996

Testcase 8996 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8997

Testcase 8997 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8998

Testcase 8998 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc8999

Testcase 8999 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9000

Testcase 9000 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9001

Testcase 9001 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9002

Testcase 9002 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9003

Testcase 9003 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9004

Testcase 9004 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9005

Testcase 9005 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9006

Testcase 9006 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9007

Testcase 9007 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9008

Testcase 9008 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9009

Testcase 9009 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9010

Testcase 9010 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9011

Testcase 9011 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9012

Testcase 9012 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9013

Testcase 9013 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9014

Testcase 9014 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9015

Testcase 9015 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9016

Testcase 9016 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9017

Testcase 9017 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9018

Testcase 9018 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9019

Testcase 9019 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9020

Testcase 9020 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9021

Testcase 9021 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9022

Testcase 9022 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9023

Testcase 9023 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9024

Testcase 9024 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9025

Testcase 9025 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9026

Testcase 9026 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9027

Testcase 9027 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9028

Testcase 9028 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9029

Testcase 9029 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9030

Testcase 9030 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9031

Testcase 9031 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9032

Testcase 9032 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9033

Testcase 9033 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9034

Testcase 9034 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9035

Testcase 9035 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9036

Testcase 9036 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9037

Testcase 9037 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9038

Testcase 9038 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9039

Testcase 9039 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9040

Testcase 9040 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9041

Testcase 9041 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9042

Testcase 9042 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9043

Testcase 9043 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9044

Testcase 9044 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9045

Testcase 9045 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9046

Testcase 9046 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9047

Testcase 9047 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9048

Testcase 9048 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9049

Testcase 9049 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9050

Testcase 9050 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9051

Testcase 9051 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9052

Testcase 9052 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9053

Testcase 9053 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9054

Testcase 9054 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9055

Testcase 9055 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9056

Testcase 9056 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9057

Testcase 9057 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9058

Testcase 9058 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9059

Testcase 9059 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9060

Testcase 9060 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9061

Testcase 9061 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9062

Testcase 9062 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9063

Testcase 9063 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9064

Testcase 9064 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9065

Testcase 9065 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9066

Testcase 9066 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9067

Testcase 9067 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9068

Testcase 9068 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9069

Testcase 9069 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9070

Testcase 9070 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9071

Testcase 9071 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9072

Testcase 9072 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9073

Testcase 9073 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9074

Testcase 9074 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9075

Testcase 9075 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9076

Testcase 9076 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9077

Testcase 9077 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9078

Testcase 9078 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9079

Testcase 9079 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9080

Testcase 9080 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9081

Testcase 9081 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9082

Testcase 9082 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9083

Testcase 9083 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9084

Testcase 9084 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9085

Testcase 9085 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9086

Testcase 9086 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9087

Testcase 9087 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9088

Testcase 9088 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9089

Testcase 9089 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9090

Testcase 9090 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9091

Testcase 9091 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9092

Testcase 9092 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9093

Testcase 9093 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9094

Testcase 9094 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9095

Testcase 9095 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9096

Testcase 9096 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9097

Testcase 9097 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9098

Testcase 9098 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9099

Testcase 9099 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9100

Testcase 9100 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9101

Testcase 9101 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9102

Testcase 9102 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9103

Testcase 9103 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9104

Testcase 9104 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9105

Testcase 9105 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9106

Testcase 9106 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9107

Testcase 9107 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9108

Testcase 9108 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9109

Testcase 9109 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9110

Testcase 9110 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9111

Testcase 9111 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9112

Testcase 9112 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9113

Testcase 9113 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9114

Testcase 9114 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9115

Testcase 9115 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9116

Testcase 9116 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9117

Testcase 9117 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9118

Testcase 9118 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9119

Testcase 9119 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9120

Testcase 9120 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9121

Testcase 9121 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9122

Testcase 9122 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9123

Testcase 9123 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9124

Testcase 9124 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9125

Testcase 9125 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9126

Testcase 9126 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9127

Testcase 9127 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9128

Testcase 9128 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9129

Testcase 9129 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9130

Testcase 9130 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9131

Testcase 9131 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9132

Testcase 9132 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9133

Testcase 9133 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9134

Testcase 9134 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9135

Testcase 9135 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9136

Testcase 9136 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9137

Testcase 9137 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9138

Testcase 9138 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9139

Testcase 9139 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9140

Testcase 9140 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9141

Testcase 9141 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9142

Testcase 9142 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9143

Testcase 9143 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9144

Testcase 9144 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9145

Testcase 9145 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9146

Testcase 9146 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9147

Testcase 9147 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9148

Testcase 9148 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9149

Testcase 9149 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9150

Testcase 9150 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9151

Testcase 9151 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9152

Testcase 9152 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9153

Testcase 9153 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9154

Testcase 9154 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9155

Testcase 9155 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9156

Testcase 9156 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9157

Testcase 9157 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9158

Testcase 9158 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9159

Testcase 9159 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9160

Testcase 9160 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9161

Testcase 9161 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9162

Testcase 9162 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9163

Testcase 9163 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9164

Testcase 9164 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9165

Testcase 9165 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9166

Testcase 9166 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9167

Testcase 9167 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9168

Testcase 9168 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9169

Testcase 9169 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9170

Testcase 9170 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9171

Testcase 9171 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9172

Testcase 9172 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9173

Testcase 9173 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9174

Testcase 9174 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9175

Testcase 9175 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9176

Testcase 9176 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9177

Testcase 9177 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9178

Testcase 9178 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9179

Testcase 9179 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9180

Testcase 9180 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9181

Testcase 9181 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9182

Testcase 9182 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9183

Testcase 9183 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9184

Testcase 9184 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9185

Testcase 9185 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9186

Testcase 9186 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9187

Testcase 9187 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9188

Testcase 9188 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9189

Testcase 9189 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9190

Testcase 9190 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9191

Testcase 9191 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9192

Testcase 9192 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9193

Testcase 9193 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9194

Testcase 9194 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9195

Testcase 9195 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9196

Testcase 9196 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9197

Testcase 9197 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9198

Testcase 9198 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9199

Testcase 9199 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9200

Testcase 9200 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9201

Testcase 9201 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9202

Testcase 9202 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9203

Testcase 9203 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9204

Testcase 9204 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9205

Testcase 9205 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9206

Testcase 9206 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9207

Testcase 9207 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9208

Testcase 9208 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9209

Testcase 9209 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9210

Testcase 9210 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9211

Testcase 9211 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9212

Testcase 9212 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9213

Testcase 9213 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9214

Testcase 9214 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9215

Testcase 9215 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9216

Testcase 9216 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9217

Testcase 9217 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9218

Testcase 9218 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9219

Testcase 9219 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9220

Testcase 9220 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9221

Testcase 9221 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9222

Testcase 9222 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9223

Testcase 9223 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9224

Testcase 9224 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9225

Testcase 9225 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9226

Testcase 9226 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9227

Testcase 9227 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9228

Testcase 9228 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9229

Testcase 9229 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9230

Testcase 9230 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9231

Testcase 9231 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9232

Testcase 9232 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9233

Testcase 9233 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9234

Testcase 9234 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9235

Testcase 9235 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9236

Testcase 9236 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9237

Testcase 9237 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9238

Testcase 9238 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9239

Testcase 9239 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9240

Testcase 9240 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9241

Testcase 9241 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9242

Testcase 9242 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9243

Testcase 9243 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9244

Testcase 9244 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9245

Testcase 9245 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9246

Testcase 9246 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9247

Testcase 9247 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9248

Testcase 9248 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9249

Testcase 9249 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9250

Testcase 9250 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9251

Testcase 9251 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9252

Testcase 9252 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9253

Testcase 9253 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9254

Testcase 9254 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9255

Testcase 9255 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9256

Testcase 9256 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9257

Testcase 9257 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9258

Testcase 9258 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9259

Testcase 9259 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9260

Testcase 9260 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9261

Testcase 9261 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9262

Testcase 9262 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9263

Testcase 9263 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9264

Testcase 9264 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9265

Testcase 9265 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9266

Testcase 9266 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9267

Testcase 9267 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9268

Testcase 9268 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9269

Testcase 9269 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9270

Testcase 9270 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9271

Testcase 9271 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9272

Testcase 9272 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9273

Testcase 9273 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9274

Testcase 9274 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9275

Testcase 9275 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9276

Testcase 9276 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9277

Testcase 9277 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9278

Testcase 9278 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9279

Testcase 9279 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9280

Testcase 9280 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9281

Testcase 9281 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9282

Testcase 9282 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9283

Testcase 9283 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9284

Testcase 9284 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9285

Testcase 9285 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9286

Testcase 9286 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9287

Testcase 9287 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9288

Testcase 9288 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9289

Testcase 9289 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9290

Testcase 9290 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9291

Testcase 9291 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9292

Testcase 9292 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9293

Testcase 9293 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9294

Testcase 9294 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9295

Testcase 9295 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9296

Testcase 9296 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9297

Testcase 9297 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9298

Testcase 9298 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9299

Testcase 9299 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9300

Testcase 9300 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9301

Testcase 9301 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9302

Testcase 9302 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9303

Testcase 9303 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9304

Testcase 9304 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9305

Testcase 9305 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9306

Testcase 9306 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9307

Testcase 9307 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9308

Testcase 9308 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9309

Testcase 9309 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9310

Testcase 9310 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9311

Testcase 9311 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9312

Testcase 9312 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9313

Testcase 9313 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9314

Testcase 9314 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9315

Testcase 9315 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9316

Testcase 9316 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9317

Testcase 9317 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9318

Testcase 9318 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9319

Testcase 9319 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9320

Testcase 9320 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9321

Testcase 9321 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9322

Testcase 9322 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9323

Testcase 9323 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9324

Testcase 9324 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9325

Testcase 9325 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9326

Testcase 9326 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9327

Testcase 9327 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9328

Testcase 9328 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9329

Testcase 9329 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9330

Testcase 9330 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9331

Testcase 9331 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9332

Testcase 9332 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9333

Testcase 9333 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9334

Testcase 9334 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9335

Testcase 9335 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9336

Testcase 9336 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9337

Testcase 9337 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9338

Testcase 9338 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9339

Testcase 9339 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9340

Testcase 9340 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9341

Testcase 9341 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9342

Testcase 9342 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9343

Testcase 9343 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9344

Testcase 9344 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9345

Testcase 9345 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9346

Testcase 9346 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9347

Testcase 9347 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9348

Testcase 9348 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9349

Testcase 9349 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9350

Testcase 9350 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9351

Testcase 9351 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9352

Testcase 9352 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9353

Testcase 9353 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9354

Testcase 9354 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9355

Testcase 9355 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9356

Testcase 9356 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9357

Testcase 9357 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9358

Testcase 9358 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9359

Testcase 9359 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9360

Testcase 9360 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9361

Testcase 9361 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9362

Testcase 9362 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9363

Testcase 9363 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9364

Testcase 9364 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9365

Testcase 9365 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9366

Testcase 9366 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9367

Testcase 9367 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9368

Testcase 9368 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9369

Testcase 9369 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9370

Testcase 9370 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9371

Testcase 9371 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9372

Testcase 9372 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9373

Testcase 9373 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9374

Testcase 9374 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9375

Testcase 9375 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9376

Testcase 9376 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9377

Testcase 9377 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9378

Testcase 9378 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9379

Testcase 9379 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9380

Testcase 9380 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9381

Testcase 9381 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9382

Testcase 9382 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9383

Testcase 9383 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9384

Testcase 9384 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9385

Testcase 9385 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9386

Testcase 9386 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9387

Testcase 9387 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9388

Testcase 9388 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9389

Testcase 9389 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9390

Testcase 9390 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9391

Testcase 9391 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9392

Testcase 9392 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9393

Testcase 9393 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9394

Testcase 9394 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9395

Testcase 9395 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9396

Testcase 9396 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9397

Testcase 9397 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9398

Testcase 9398 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9399

Testcase 9399 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9400

Testcase 9400 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9401

Testcase 9401 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9402

Testcase 9402 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9403

Testcase 9403 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9404

Testcase 9404 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9405

Testcase 9405 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9406

Testcase 9406 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9407

Testcase 9407 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9408

Testcase 9408 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9409

Testcase 9409 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9410

Testcase 9410 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9411

Testcase 9411 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9412

Testcase 9412 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9413

Testcase 9413 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9414

Testcase 9414 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9415

Testcase 9415 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9416

Testcase 9416 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9417

Testcase 9417 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9418

Testcase 9418 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9419

Testcase 9419 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9420

Testcase 9420 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9421

Testcase 9421 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9422

Testcase 9422 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9423

Testcase 9423 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9424

Testcase 9424 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9425

Testcase 9425 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9426

Testcase 9426 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9427

Testcase 9427 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9428

Testcase 9428 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9429

Testcase 9429 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9430

Testcase 9430 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9431

Testcase 9431 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9432

Testcase 9432 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9433

Testcase 9433 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9434

Testcase 9434 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9435

Testcase 9435 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9436

Testcase 9436 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9437

Testcase 9437 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9438

Testcase 9438 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9439

Testcase 9439 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9440

Testcase 9440 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9441

Testcase 9441 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9442

Testcase 9442 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9443

Testcase 9443 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9444

Testcase 9444 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9445

Testcase 9445 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9446

Testcase 9446 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9447

Testcase 9447 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9448

Testcase 9448 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9449

Testcase 9449 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9450

Testcase 9450 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9451

Testcase 9451 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9452

Testcase 9452 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9453

Testcase 9453 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9454

Testcase 9454 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9455

Testcase 9455 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9456

Testcase 9456 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9457

Testcase 9457 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9458

Testcase 9458 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9459

Testcase 9459 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9460

Testcase 9460 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 0, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9461

Testcase 9461 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9462

Testcase 9462 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9463

Testcase 9463 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9464

Testcase 9464 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	MalformedDnsIdentifier
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9465

Testcase 9465 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9466

Testcase 9466 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 3, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9467

Testcase 9467 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9468

Testcase 9468 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 4, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9469

Testcase 9469 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9470

Testcase 9470 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 5, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9471

Testcase 9471 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9472

Testcase 9472 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9473

Testcase 9473 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9474

Testcase 9474 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9475

Testcase 9475 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9476

Testcase 9476 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	hostname mismatch
openssl-3.3.2	✅	hostname mismatch
openssl-3.2.3	✅	hostname mismatch
rustls-webpki	✅	subject name validation failed
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	hostname mismatch
pyca-cryptography-43.0.3	✅	validation failed: Other("leaf certificate has no matching subjectAltName")
openssl-3.1.7	✅	hostname mismatch
openssl-1.1	✅	Hostname mismatch
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9477

Testcase 9477 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9478

Testcase 9478 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 9, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9479

Testcase 9479 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9480

Testcase 9480 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 10, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9481

Testcase 9481 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9482

Testcase 9482 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 11, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9483

Testcase 9483 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9484

Testcase 9484 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 12, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9485

Testcase 9485 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9486

Testcase 9486 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 13, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9487

Testcase 9487 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9488

Testcase 9488 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 14, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9489

Testcase 9489 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::nameconstraints::tc9490

Testcase 9490 from the BetterTLS nameconstraints suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	BadDer
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Malformed(ParseError { kind: UnexpectedTag { actual: Tag { value: 15, constructed: false, class: ContextSpecific } }, location: [1] })
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc0

Testcase 0 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc1

Testcase 1 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc2

Testcase 2 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc3

Testcase 3 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2025-05-29T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	certificate has expired
openssl-3.3.2	✅	certificate has expired
openssl-3.2.3	✅	certificate has expired
rustls-webpki	✅	CertExpired
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 expired 2024-05-28 16:10:44Z
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	certificate has expired
pyca-cryptography-43.0.3	✅	validation failed: Other("cert is not valid at validation time")
openssl-3.1.7	✅	certificate has expired
openssl-1.1	✅	certificate has expired
rust-webpki	✅	CertExpired

bettertls::pathbuilding::tc4

Testcase 4 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc5

Testcase 5 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	RequiredEkuNotFound
certvalidator-0.11.1	❌ (unexpected success)	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("required EKU not found"))
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc6

Testcase 6 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	invalid CA certificate
openssl-3.3.2	✅	invalid CA certificate
openssl-3.2.3	✅	invalid CA certificate
rustls-webpki	✅	EndEntityUsedAsCa
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	invalid CA certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("Certificate is missing required extension"))
openssl-3.1.7	✅	invalid CA certificate
openssl-1.1	✅	invalid CA certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc7

Testcase 7 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	invalid CA certificate
openssl-3.3.2	✅	invalid CA certificate
openssl-3.2.3	✅	invalid CA certificate
rustls-webpki	✅	EndEntityUsedAsCa
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	invalid CA certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("basicConstraints.cA must be asserted in a CA certificate"))
openssl-3.1.7	✅	invalid CA certificate
openssl-1.1	✅	invalid CA certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc8

Testcase 8 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	CA signature digest algorithm too weak
openssl-3.3.2	✅	CA signature digest algorithm too weak
openssl-3.2.3	✅	CA signature digest algorithm too weak
rustls-webpki	✅	UnsupportedSignatureAlgorithm
certvalidator-0.11.1	✅	The path could not be validated because the signature of intermediate certificate 1 uses the weak hash algorithm sha1
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	CA signature digest algorithm too weak
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("Forbidden signature algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: Other(ObjectIdentifier { oid: 1.2.840.10045.4.1 }, None) }"))
openssl-3.1.7	✅	CA signature digest algorithm too weak
openssl-1.1	✅	CA signature digest algorithm too weak
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc9

Testcase 9 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc10

Testcase 10 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2025-05-29T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	certificate has expired
openssl-3.3.2	✅	certificate has expired
openssl-3.2.3	✅	certificate has expired
rustls-webpki	✅	CertExpired
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 expired 2024-05-28 16:10:44Z
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	certificate has expired
pyca-cryptography-43.0.3	✅	validation failed: Other("cert is not valid at validation time")
openssl-3.1.7	✅	certificate has expired
openssl-1.1	✅	certificate has expired
rust-webpki	✅	CertExpired

bettertls::pathbuilding::tc11

Testcase 11 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc12

Testcase 12 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	RequiredEkuNotFound
certvalidator-0.11.1	❌ (unexpected success)	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("required EKU not found"))
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc13

Testcase 13 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	invalid CA certificate
openssl-3.3.2	✅	invalid CA certificate
openssl-3.2.3	✅	invalid CA certificate
rustls-webpki	✅	EndEntityUsedAsCa
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	invalid CA certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("Certificate is missing required extension"))
openssl-3.1.7	✅	invalid CA certificate
openssl-1.1	✅	invalid CA certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc14

Testcase 14 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	invalid CA certificate
openssl-3.3.2	✅	invalid CA certificate
openssl-3.2.3	✅	invalid CA certificate
rustls-webpki	✅	EndEntityUsedAsCa
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	invalid CA certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("basicConstraints.cA must be asserted in a CA certificate"))
openssl-3.1.7	✅	invalid CA certificate
openssl-1.1	✅	invalid CA certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc15

Testcase 15 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	CA signature digest algorithm too weak
openssl-3.3.2	✅	CA signature digest algorithm too weak
openssl-3.2.3	✅	CA signature digest algorithm too weak
rustls-webpki	✅	UnsupportedSignatureAlgorithm
certvalidator-0.11.1	✅	The path could not be validated because the signature of intermediate certificate 1 uses the weak hash algorithm sha1
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	CA signature digest algorithm too weak
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("Forbidden signature algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: Other(ObjectIdentifier { oid: 1.2.840.10045.4.1 }, None) }"))
openssl-3.1.7	✅	CA signature digest algorithm too weak
openssl-1.1	✅	CA signature digest algorithm too weak
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc16

Testcase 16 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc17

Testcase 17 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc18

Testcase 18 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc19

Testcase 19 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc20

Testcase 20 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc21

Testcase 21 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc22

Testcase 22 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc23

Testcase 23 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc24

Testcase 24 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc25

Testcase 25 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc26

Testcase 26 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc27

Testcase 27 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc28

Testcase 28 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc29

Testcase 29 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc30

Testcase 30 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc31

Testcase 31 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc32

Testcase 32 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc33

Testcase 33 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc34

Testcase 34 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc35

Testcase 35 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc36

Testcase 36 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2025-05-29T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	CertExpired
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 expired 2024-05-28 16:10:44Z
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Other("cert is not valid at validation time")
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	CertExpired

bettertls::pathbuilding::tc37

Testcase 37 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	permitted subtree violation
openssl-3.3.2	✅	permitted subtree violation
openssl-3.2.3	✅	permitted subtree violation
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	permitted subtree violation
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("all candidates exhausted with no interior errors"))
openssl-3.1.7	✅	permitted subtree violation
openssl-1.1	✅	permitted subtree violation
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc38

Testcase 38 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	❌ (unexpected success)	N/A
openssl-3.3.2	❌ (unexpected success)	N/A
openssl-3.2.3	❌ (unexpected success)	N/A
rustls-webpki	✅	RequiredEkuNotFound
certvalidator-0.11.1	❌ (unexpected success)	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected success)	N/A
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("all candidates exhausted with no interior errors"))
openssl-3.1.7	❌ (unexpected success)	N/A
openssl-1.1	❌ (unexpected success)	N/A
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc39

Testcase 39 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	invalid CA certificate
openssl-3.3.2	✅	invalid CA certificate
openssl-3.2.3	✅	invalid CA certificate
rustls-webpki	✅	EndEntityUsedAsCa
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	invalid CA certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("all candidates exhausted with no interior errors"))
openssl-3.1.7	✅	invalid CA certificate
openssl-1.1	✅	invalid CA certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc40

Testcase 40 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	invalid CA certificate
openssl-3.3.2	✅	invalid CA certificate
openssl-3.2.3	✅	invalid CA certificate
rustls-webpki	✅	EndEntityUsedAsCa
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	invalid CA certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("all candidates exhausted with no interior errors"))
openssl-3.1.7	✅	invalid CA certificate
openssl-1.1	✅	invalid CA certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc41

Testcase 41 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	CA signature digest algorithm too weak
openssl-3.3.2	✅	CA signature digest algorithm too weak
openssl-3.2.3	✅	CA signature digest algorithm too weak
rustls-webpki	✅	UnsupportedSignatureAlgorithm
certvalidator-0.11.1	✅	The path could not be validated because the signature of intermediate certificate 1 uses the weak hash algorithm sha1
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	CA signature digest algorithm too weak
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("all candidates exhausted with no interior errors"))
openssl-3.1.7	✅	CA signature digest algorithm too weak
openssl-1.1	✅	CA signature digest algorithm too weak
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc42

Testcase 42 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2025-05-29T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	CertExpired
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 expired 2024-05-28 16:10:44Z
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Other("cert is not valid at validation time")
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	certificate has expired
rust-webpki	✅	CertExpired

bettertls::pathbuilding::tc43

Testcase 43 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc44

Testcase 44 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	RequiredEkuNotFound
certvalidator-0.11.1	❌ (unexpected success)	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("required EKU not found"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc45

Testcase 45 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	EndEntityUsedAsCa
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("Certificate is missing required extension"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc46

Testcase 46 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	EndEntityUsedAsCa
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("basicConstraints.cA must be asserted in a CA certificate"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc47

Testcase 47 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	UnsupportedSignatureAlgorithm
certvalidator-0.11.1	✅	The path could not be validated because the signature of intermediate certificate 1 uses the weak hash algorithm sha1
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("Forbidden signature algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: Other(ObjectIdentifier { oid: 1.2.840.10045.4.1 }, None) }"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc48

Testcase 48 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc49

Testcase 49 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc50

Testcase 50 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	✅	N/A

bettertls::pathbuilding::tc51

Testcase 51 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc52

Testcase 52 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	invalid CA certificate
openssl-3.3.2	❌ (unexpected failure)	invalid CA certificate
openssl-3.2.3	❌ (unexpected failure)	invalid CA certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	invalid CA certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	invalid CA certificate
openssl-1.1	❌ (unexpected failure)	invalid CA certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc53

Testcase 53 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	invalid CA certificate
openssl-3.3.2	❌ (unexpected failure)	invalid CA certificate
openssl-3.2.3	❌ (unexpected failure)	invalid CA certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	invalid CA certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	invalid CA certificate
openssl-1.1	❌ (unexpected failure)	invalid CA certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc54

Testcase 54 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	CA signature digest algorithm too weak
openssl-3.3.2	❌ (unexpected failure)	CA signature digest algorithm too weak
openssl-3.2.3	❌ (unexpected failure)	CA signature digest algorithm too weak
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	CA signature digest algorithm too weak
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	CA signature digest algorithm too weak
openssl-1.1	❌ (unexpected failure)	CA signature digest algorithm too weak
rust-webpki	✅	N/A

bettertls::pathbuilding::tc55

Testcase 55 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc56

Testcase 56 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	permitted subtree violation
openssl-3.3.2	❌ (unexpected failure)	permitted subtree violation
openssl-3.2.3	❌ (unexpected failure)	permitted subtree violation
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	permitted subtree violation
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	permitted subtree violation
openssl-1.1	❌ (unexpected failure)	permitted subtree violation
rust-webpki	✅	N/A

bettertls::pathbuilding::tc57

Testcase 57 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	✅	N/A
openssl-3.3.2	✅	N/A
openssl-3.2.3	✅	N/A
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	N/A
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	✅	N/A
openssl-1.1	✅	N/A
rust-webpki	✅	N/A

bettertls::pathbuilding::tc58

Testcase 58 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	invalid CA certificate
openssl-3.3.2	❌ (unexpected failure)	invalid CA certificate
openssl-3.2.3	❌ (unexpected failure)	invalid CA certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	invalid CA certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	invalid CA certificate
openssl-1.1	❌ (unexpected failure)	invalid CA certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc59

Testcase 59 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	invalid CA certificate
openssl-3.3.2	❌ (unexpected failure)	invalid CA certificate
openssl-3.2.3	❌ (unexpected failure)	invalid CA certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	invalid CA certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	invalid CA certificate
openssl-1.1	❌ (unexpected failure)	invalid CA certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc60

Testcase 60 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:45+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	CA signature digest algorithm too weak
openssl-3.3.2	❌ (unexpected failure)	CA signature digest algorithm too weak
openssl-3.2.3	❌ (unexpected failure)	CA signature digest algorithm too weak
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	CA signature digest algorithm too weak
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	CA signature digest algorithm too weak
openssl-1.1	❌ (unexpected failure)	CA signature digest algorithm too weak
rust-webpki	✅	N/A

bettertls::pathbuilding::tc61

Testcase 61 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc62

Testcase 62 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc63

Testcase 63 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc64

Testcase 64 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc65

Testcase 65 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc66

Testcase 66 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc67

Testcase 67 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc68

Testcase 68 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
SUCCESS	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	❌ (unexpected failure)	N/A
openssl-3.0.15	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.3.2	❌ (unexpected failure)	unable to get local issuer certificate
openssl-3.2.3	❌ (unexpected failure)	unable to get local issuer certificate
rustls-webpki	✅	N/A
certvalidator-0.11.1	✅	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	❌ (unexpected failure)	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	N/A
openssl-3.1.7	❌ (unexpected failure)	unable to get local issuer certificate
openssl-1.1	❌ (unexpected failure)	unable to get local issuer certificate
rust-webpki	✅	N/A

bettertls::pathbuilding::tc69

Testcase 69 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2025-05-29T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	CertExpired
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 expired 2025-05-29 17:10:45Z
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Other("cert is not valid at validation time")
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	certificate has expired
rust-webpki	✅	CertExpired

bettertls::pathbuilding::tc70

Testcase 70 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc71

Testcase 71 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	RequiredEkuNotFound
certvalidator-0.11.1	❌ (unexpected success)	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("required EKU not found"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc72

Testcase 72 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	EndEntityUsedAsCa
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 is not a CA
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("Certificate is missing required extension"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc73

Testcase 73 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	EndEntityUsedAsCa
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 2 is not a CA
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("basicConstraints.cA must be asserted in a CA certificate"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc74

Testcase 74 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	UnsupportedSignatureAlgorithm
certvalidator-0.11.1	✅	The path could not be validated because the signature of intermediate certificate 6 uses the weak hash algorithm sha1
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("Forbidden signature algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: Other(ObjectIdentifier { oid: 1.2.840.10045.4.1 }, None) }"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc75

Testcase 75 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2025-05-29T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	CertExpired
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 expired 2024-05-28 16:10:45Z
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: Other("cert is not valid at validation time")
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	certificate has expired
rust-webpki	✅	CertExpired

bettertls::pathbuilding::tc76

Testcase 76 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	NameConstraintViolation
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 contains the following unsupported critical extension: name_constraints
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("no permitted name constraints matched SAN"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc77

Testcase 77 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	RequiredEkuNotFound
certvalidator-0.11.1	❌ (unexpected success)	N/A
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("required EKU not found"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc78

Testcase 78 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	EndEntityUsedAsCa
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("Certificate is missing required extension"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc79

Testcase 79 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	EndEntityUsedAsCa
certvalidator-0.11.1	✅	The path could not be validated because intermediate certificate 1 is not a CA
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("basicConstraints.cA must be asserted in a CA certificate"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer

bettertls::pathbuilding::tc80

Testcase 80 from the BetterTLS pathbuilding suite.

Expected result	Validation kind	Validation time	Features	Importance	Conflicts	Download
FAILURE	SERVER	2024-05-27T17:10:46+00:00	N/A	undetermined	N/A

Harness	Result	Context
gnutls-certtool-3.7.3	✅	N/A
openssl-3.0.15	✅	unable to get local issuer certificate
openssl-3.3.2	✅	unable to get local issuer certificate
openssl-3.2.3	✅	unable to get local issuer certificate
rustls-webpki	✅	UnsupportedSignatureAlgorithm
certvalidator-0.11.1	✅	The path could not be validated because the signature of intermediate certificate 1 uses the weak hash algorithm sha1
gocryptox509-go1.23.3	✅	N/A
openssl-3.4.0	✅	unable to get local issuer certificate
pyca-cryptography-43.0.3	✅	validation failed: CandidatesExhausted(Other("Forbidden signature algorithm: AlgorithmIdentifier { oid: DefinedByMarker(PhantomData), params: Other(ObjectIdentifier { oid: 1.2.840.10045.4.1 }, None) }"))
openssl-3.1.7	✅	unable to get local issuer certificate
openssl-1.1	✅	unable to get local issuer certificate
rust-webpki	✅	UnknownIssuer